| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | ≤ 3.5.3 | |
| websphere commerce suite | = 3.1.2= 3.2 |
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free