CVE-2016-5953

IBM Sterling Order Management transmits the session identifier within the URL

published February 1, 2017

CVSS
—
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00842 · 57.3th percentile
Published
2017-02-01T22:00Z
EPSS history
Timeline
  • 01 FEB 22:00Z
    IBM Sterling Order Management transmits the session identifier within the URL
    cvelistv5