Description
IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie.
References
- 1035125 vdb-entry
- JR54787 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21975827