CVE-2011-2021

Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.

Published: May 21, 2011
Updated: Apr 13, 2023
CVE: CVE-2011-2021
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
tibco / iprocess_engine	10.6.0	10.6.0.x
tibco / iprocess_engine	10.5	10.5.x
tibco / iprocess_engine	10.6	10.6.x
tibco / iprocess_engine	10.6.2	10.6.2.x
tibco / iprocess_engine	11.1.1	11.1.1.x
tibco / iprocess_engine	10.3.1	10.3.1.x
tibco / iprocess_engine	11.0	11.0.x
tibco / iprocess_engine	10.3.0	10.3.0.x
tibco / iprocess_engine	10.4.1	10.4.1.x
tibco / iprocess_engine	10.4	10.4.x
tibco / iprocess_engine	10.3.5	10.3.5.x
tibco / iprocess_engine	10.3.3	10.3.3.x
tibco / iprocess_engine	-	11.1.2.x
tibco / iprocess_engine	10.3.2	10.3.2.x
tibco / iprocess_engine	10.6.1	10.6.1.x
tibco / iprocess_engine	10.3.4	10.3.4.x
tibco / iprocess_workspace	-	11.3.x
tibco / iprocess_workspace	11.0	11.0.x
tibco / iprocess_workspace	11.2	11.2.x
tibco / iprocess_workspace	11.1	11.1.x

Vulnerability Database

290,206

CVE-2011-2021