The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1893
Reference (s):
- AIXAPAR:IT07841
- URL: http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841
- BID:73916
- URL: http://www.securityfocus.com/bid/73916
- http://www-01.ibm.com/support/docview.wss?uid=swg21701337