PT-2026-3621 · Ibm · Ibm Sterling Connect:Express+1
CVE-2025-36115
·
Publicado
2026-01-20
·
Atualizado
2026-02-03
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator versions 5.2.0.00 through 5.2.0.12
Description
The software does not prevent reuse of the session ID after it has been used. This could allow an authenticated user to impersonate another user on the system.
Recommendations
Update to a version where the session ID is invalidated after use.
Correção
Session Fixation
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Sterling Connect:Express
Sterling B2B Integrator