VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Apr 14, 2017· Updated Jun 17, 2026

CVE-2017-1152

CVE-2017-1152

Description

IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • IBM/Financial Transaction Manager5 versions
    cpe:2.3:a:ibm:financial_transaction_manager:3.0.1.0:*:*:*:*:ach_services:*:*+ 4 more
    • cpe:2.3:a:ibm:financial_transaction_manager:3.0.1.0:*:*:*:*:ach_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:3.0.1.0:*:*:*:*:check_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:ach_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:check_services:*:*
    • (no CPE)range: 3.0.1, 3.0.2
  • IBM Corporation/Financial Transaction Managerv5
    Range: 3.0.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.