• info
• discussion
• exploit
• solution
• references

IBM Cognos Command Center CVE-2013-4001 Unspecified Session Fixation Vulnerability

IBM Cognos Command Center is prone to an unspecified session-fixation vulnerability.

An attacker can exploit this issue to hijack an arbitrary session and gain unauthorized access to the affected application.

IBM Cognos Command Center 10.1 and prior versions are vulnerable.