CVE-2011-2021 Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco iprocess engine | <= 11.1.2 | No fix listed |
| tibco iprocess engine | = 10.3.0 | No fix listed |
| tibco iprocess engine | = 10.3.1 | No fix listed |
| tibco iprocess engine | = 10.3.2 | No fix listed |
| tibco iprocess engine | = 10.3.3 | No fix listed |
| tibco iprocess engine | = 10.3.4 | No fix listed |
| tibco iprocess engine | = 10.3.5 | No fix listed |
| tibco iprocess engine | = 10.4 | No fix listed |
| tibco iprocess engine | = 10.4.1 | No fix listed |
| tibco iprocess engine | = 10.5 | No fix listed |
| tibco iprocess engine | = 10.6 | No fix listed |
| tibco iprocess engine | = 10.6.0 | No fix listed |
| tibco iprocess engine | = 10.6.1 | No fix listed |
| tibco iprocess engine | = 10.6.2 | No fix listed |
| tibco iprocess engine | = 11.0 | No fix listed |
| tibco iprocess engine | = 11.1.1 | No fix listed |
| tibco iprocess workspace | <= 11.3 | No fix listed |
| tibco iprocess workspace | = 11.0 | No fix listed |
| tibco iprocess workspace | = 11.1 | No fix listed |
| tibco iprocess workspace | = 11.2 | No fix listed |
References
- 72554 vdb-entry
- 44639 third-party-advisory vendor-advisory
- 47921 vdb-entry
- www.tibco.com vendor-advisory
- www.tibco.com vendor-advisory
- ADV-2011-1272 vdb-entry vendor-advisory
- iprocess-unspecified-session-hijacking(67538) vdb-entry