CVE-2017-1270

LOW 3.3CVE-2017-1270 · Published 20/12/2017 · updated 17/06/2026

In short

CVE-2017-1270 is a LOW (CVSS 3.3) vulnerability affecting security guardium (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 25.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
security guardium ibm	`= 10.0= 10.0.1= 10.1.0= 10.1.2= 10.1.3`	No fix yet

Description

IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 124745.

References

ibm.com/support/docview.wss · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/124745 · Third Party Advisory

More vulnerabilities in security guardium

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

security guardium

ibm

= 10.0= 10.0.1= 10.1.0= 10.1.2= 10.1.3

No fix yet

More vulnerabilities in security guardium

See all →