description: IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL.
problem types: Obtain Information
affected:
{
product: Sterling Order Management
vendor: IBM Corporation
versions:
status: affected, version: 8.5
status: affected, version: 8.0
status: affected, version: 9.1
status: affected, version: 9.2
status: affected, version: 9.2.1
status: affected, version: 9.3
status: affected, version: 9.4
status: affected, version: 9.5
}