IBM WebSphere Application Server Predictable Session ID Vulnerability

Solution:
This issue was resolved in IBM WebSphere Application Server 4.0(and later) and any information about patching these versions should be disregarded.

The vendor has released a patch which addresses this issue.


IBM Websphere Application Server 3.0 .2.2

IBM Websphere Application Server 3.0 .2.3

IBM WebSphere Application Server Advanced Edition 3.0 .2.1

IBM Websphere Application Server 3.0 .2.4

IBM Websphere Application Server 3.5.1

IBM Websphere Application Server 3.5.2

IBM Websphere Application Server 3.5.3


 

Privacy Statement
Copyright 2010, SecurityFocus