IBM Security Bulletin: 10x vulnerability in IBM Control Center could allow an outside user to obtain the ID (CVE-2017-1152)

IBM 10x vulnerability in IBM Control Center does not properly update the session id which could allow a user to obtain the ID in further attacks against the system.

CVE(s): CVE-2017-1152

Affected product(s) and affected version(s):

IBM Control Center 6.1.0.0 through 6.1.0.1 iFix05
IBM Control Center 6.0.0.0 through 6.0.0.1 iFix09

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2vSLa3B
X-Force Database: http://ift.tt/2odAHyr

The post IBM Security Bulletin: 10x vulnerability in IBM Control Center could allow an outside user to obtain the ID (CVE-2017-1152) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2vTllAy