CVE-2013-4001 - Session fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers to hijack web sessions via an authorization cookie

MEDIUM

Session fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers to hijack web sessions via an authorization cookie

Published Dec 14, 2013

4.3

MEDIUM

CVSS 2.0

EPSS 0.98%

Session fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers to hijack web sessions via an authorization cookie.

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

Link	Providers	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg21657932		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3933		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/85151		vdb-entryx_refsource_XF

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Dec 14, 2013

Updated Aug 6, 2024

Reserved Jun 7, 2013

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Red Hat

No data

ENISA EUVD

Assigner ibm

Published Dec 14, 2013

Updated Aug 6, 2024

GitHub

No data