IBM InfoSphere Master Data management session fixed Vulnerability

Release date:
Updated on:

Affected Systems:
IBM InfoSphere Master Data Management 11.x
IBM InfoSphere Master Data Management 10.x
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2013-5426

IBM InfoSphere Master Data Management is a primary Data Management solution.

An error occurs when IBM InfoSphere Master Data Management processes sessions. Attackers can exploit this vulnerability to hijack sessions of other users by enticing users to click special links.

<* Source: vendor

Link: http://secunia.com/advisories/56163/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

IBM
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.ibm.com/support/fixcentral/
Http://www.ibm.com/support/docview.wss? Uid = swg21660082