Description
Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.
References
- http://www.tibco.com/services/support/advisories/iprocess-advisory_20110518.jsp
- iprocess-unspecified-session-hijacking(67538) vdb-entry
- 47921 vdb-entry
- 72554 vdb-entry
- ADV-2011-1272 vdb-entry
- 44639 third-party-advisory
- http://www.tibco.com/multimedia/iprocess_advisory_20110518_tcm8-13710.txt