description: IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 124745.
problem types: Obtain Information
affected:
{
product: Security Guardium
vendor: IBM
versions:
status: affected, version: 10.0
status: affected, version: 10.0.1
status: affected, version: 10.1
status: affected, version: 10.1.2
status: affected, version: 10.1.3
}