Unscored severity · published Dec 12, 2014
CVE-2014-4815
Session fixation vulnerability in IBM Rational Lifecycle Integration Adapter for Windchill 1.x before 1.0.1 allows remote attackers to hijack web sessions via unspecified vectors
–
CVSS
0.9%
EPSS
No
On KEV
Description
Session fixation vulnerability in IBM Rational Lifecycle Integration Adapter for Windchill 1.x before 1.0.1 allows remote attackers to hijack web sessions via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IR
Ibm Rational Lifecycle Integration Adapter For Windchill · Ibm
1.0.0 · source: NVD
Affected product
IR
Ibm Rational Lifecycle Integration Adapter For Windchill
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4815
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4815
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21691993
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95401
More from Ibm Rational Lifecycle Integration Adapter For Windchill
5.3
CVE-2021-34587
In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash