Description
The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.
References
- 1032025 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21701337
- 73916 vdb-entry
- IT07841 vendor-advisory