Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-8921 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T02:35:02.312Z Vendors: IBM Corporation Products: FileNet Content Manager Problem Types: Gain Access Description: IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21994018 - http://www.securityfocus.com/bid/94582
CVE ID: CVE-2016-8922 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T02:35:02.294Z Vendors: IBM Corporation Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: Exphox WebRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21993561 - http://www.securityfocus.com/bid/94413
CVE ID: CVE-2016-8923 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-06T02:35:02.253Z Vendors: IBM Products: Curam Social Program Management Problem Types: Obtain Information Description: IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to. IBM X-Force ID: 118536. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22001774 - http://www.securityfocus.com/bid/97989
CVE ID: CVE-2016-8924 State: PUBLISHED Published: 2017-04-26T17:00:00 Last Updated: 2024-08-06T02:35:02.340Z Vendors: IBM Corporation Products: Maximo Asset Management Problem Types: Gain Privileges Description: IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 118537. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98023 - http://www.ibm.com/support/docview.wss?uid=swg21996256
CVE ID: CVE-2016-8925 State: PUBLISHED Published: 2017-04-14T16:00:00 Last Updated: 2024-08-06T02:35:02.313Z Vendors: IBM Corporation Products: Tivoli Application Dependency Discovery Manager Problem Types: Obtain Information Description: IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary files which could allow the attacker to read any file on the system. IBM X-Force ID: 118538. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97625 - http://www.ibm.com/support/docview.wss?uid=swg22001579&myns=swgtiv&mynp=OCSSPLFC&mync=E&cm_sp=swgtiv-_-OCSSPLFC-_-E
CVE ID: CVE-2016-8926 State: PUBLISHED Published: 2017-04-14T16:00:00 Last Updated: 2024-08-06T02:35:02.314Z Vendors: IBM Corporation Products: Tivoli Application Dependency Discovery Manager Problem Types: Obtain Information Description: IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to read system files or data that is restricted to authorized users. IBM X-Force ID: 118539. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22001579&myns=swgtiv&mynp=OCSSPLFC&mync=E&cm_sp=swgtiv-_-OCSSPLFC-_-E
CVE ID: CVE-2016-8927 State: PUBLISHED Published: 2017-04-14T16:00:00 Last Updated: 2024-08-06T02:35:02.364Z Vendors: IBM Corporation Products: Tivoli Application Dependency Discovery Manager Problem Types: Cross-Site Scripting Description: IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118540. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22001579&myns=swgtiv&mynp
st Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22001579&myns=swgtiv&mynp=OCSSPLFC&mync=E&cm_sp=swgtiv-_-OCSSPLFC-_-E - http://www.securityfocus.com/bid/97629
CVE ID: CVE-2016-8928 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T02:35:02.332Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Data Manipulation Description: IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992072 - http://www.securityfocus.com/bid/95447
CVE ID: CVE-2016-8929 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T02:35:02.312Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Data Manipulation Description: IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992072 - http://www.securityfocus.com/bid/95437
CVE ID: CVE-2016-8930 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T02:35:02.314Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Data Manipulation Description: IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992072 - http://www.securityfocus.com/bid/95449
CVE ID: CVE-2016-8931 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T02:35:02.320Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Gain Access Description: IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992072 - http://www.securityfocus.com/bid/95451
CVE ID: CVE-2016-8932 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T02:35:02.315Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Gain Access Description: IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992072 - http://www.securityfocus.com/bid/95443
CVE ID: CVE-2016-8933 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T02:35:02.314Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Obtain Information Description: IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21992072 - http://www.securityfocus.com/bid/95435
CVE ID: CVE-2016-8934 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T02:35:02.332Z Vendors: IBM Corporation Products: WebSphere Application Server for Bluemix Problem Types: Cross-Site Scripting Description: IBM WebSphere Application Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995995 - http://www.securityfocus.com/bid/95154
CVE ID: CVE-2016-8935 State: PUBLISHED Published: 2017-03-31T18:00:00 Last Updated: 2024-08-06T02:35:02.355Z Vendors: IBM Corporation Products: Kenexa LMS on Cloud Problem Types: Cross-Site Scripting Description: IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999483. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999483 - http://www.securityfocus.com/bid/97
am Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999483 - http://www.securityfocus.com/bid/97077
CVE ID: CVE-2016-8936 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T02:35:02.315Z Vendors: IBM Corporation Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM Social Rendering Templates for Digital Data Connector is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21993895 - http://www.securityfocus.com/bid/94443
CVE ID: CVE-2016-8937 State: PUBLISHED Published: 2017-10-05T17:00:00Z Last Updated: 2024-09-16T16:53:53.088Z Vendors: IBM Products: Spectrum Protect Problem Types: Obtain Information Description: The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/118750 - http://www.ibm.com/support/docview.wss?uid=swg22007935
CVE ID: CVE-2016-8938 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T02:35:02.317Z Vendors: IBM Corporation Products: UrbanCode Deploy Problem Types: Gain Access Description: IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95289 - http://www.ibm.com/support/docview.wss?uid=swg2C1000237
CVE ID: CVE-2016-8939 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-06T02:35:02.305Z Vendors: IBM Products: Spectrum Protect Problem Types: Obtain Information Description: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/blog/vulnerability-in-tsm - http://www.securitytracker.com/id/1038607 - http://www.securityfocus.com/bid/98783 - http://www.ibm.com/support/docview.wss?uid=swg22003738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11879
83 - http://www.ibm.com/support/docview.wss?uid=swg22003738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/118790
CVE ID: CVE-2016-8940 State: PUBLISHED Published: 2017-03-07T17:00:00 Last Updated: 2024-08-06T02:35:02.336Z Vendors: IBM Corporation Products: Tivoli Storage Manager Problem Types: Obtain Information Description: IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946. Additional Analyst Notes: - CVE Program Container:
her sensitive information for the product. IBM Reference #: 1998946. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21998946
CVE ID: CVE-2016-8941 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T02:35:02.479Z Vendors: IBM Corporation Products: Spectrum Control Standard Select Edition Problem Types: Gain Access Description: IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94914 - http://www.ibm.com/support/docview.wss?uid=swg21995128
CVE ID: CVE-2016-8942 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T02:35:02.283Z Vendors: IBM Corporation Products: Spectrum Control Standard Select Edition Problem Types: Data Manipulation Description: IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995128 - http://www.securityfocus.com/bid/94916
CVE ID: CVE-2016-8943 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T02:35:02.322Z Vendors: IBM Corporation Products: Spectrum Control Standard Select Edition Problem Types: Cross-Site Scripting Description: IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94917 - http://www.ibm.com/support/docview.wss?uid=swg21995128
CVE ID: CVE-2016-8944 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:35:02.355Z Vendors: IBM Corporation Products: AIX Problem Types: Denial of Service Description: IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system. IBM APARs: IV91488, IV91487, IV91456, IV90234. Additional Analyst Notes: - CVE Program Container: References: - http://aix.software.ibm.com/aix/efixes/security/sysproc_advisory.asc - http://www.securitytracker.com/id/1037759 - http://www.securityfocus.com/bid/95888
CVE ID: CVE-2016-8946 State: PUBLISHED Published: 2017-07-12T17:00:00Z Last Updated: 2024-09-16T23:16:10.137Z Vendors: IBM Products: Emptoris Sourcing Problem Types: Cross-Site Scripting Description: IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118833. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/118833 - http://www.ibm.com/support/docview.wss?uid=swg22005549 - http://www.secur
e.xforce.ibmcloud.com/vulnerabilities/118833 - http://www.ibm.com/support/docview.wss?uid=swg22005549 - http://www.securityfocus.com/bid/99545
CVE ID: CVE-2016-8947 State: PUBLISHED Published: 2017-07-12T17:00:00Z Last Updated: 2024-09-16T17:42:36.557Z Vendors: IBM Products: Emptoris Sourcing Problem Types: Gain Access Description: IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 118834 Additional Analyst No
highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 118834 Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22005549 - http://www.securityfocus.com/bid/99545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/118834
CVE ID: CVE-2016-8948 State: PUBLISHED Published: 2017-07-12T17:00:00Z Last Updated: 2024-09-16T22:56:11.393Z Vendors: IBM Products: Emptoris Sourcing Problem Types: Cross-Site Scripting Description: IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118835. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22005549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/118835 - http://www.secur
com/support/docview.wss?uid=swg22005549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/118835 - http://www.securityfocus.com/bid/99545
CVE ID: CVE-2016-8949 State: PUBLISHED Published: 2017-08-09T18:00:00Z Last Updated: 2024-09-16T16:18:53.494Z Vendors: IBM Products: Emptoris Supplier Lifecycle Management Problem Types: Gain Access Description: IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X
his could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 118836. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006854 - https://exchange.xforce.ibmcloud.com/vulnerabilities/118836 - http://www.securityfocus.com/bid/100222
CVE ID: CVE-2016-8950 State: PUBLISHED Published: 2017-07-12T17:00:00Z Last Updated: 2024-09-17T03:03:37.354Z Vendors: IBM Products: Emptoris Sourcing Problem Types: Cross-Site Scripting Description: IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118837. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/118837 - http://www.ibm.com/support/docview.wss?uid=swg22005549 - http://www.secur
e.xforce.ibmcloud.com/vulnerabilities/118837 - http://www.ibm.com/support/docview.wss?uid=swg22005549 - http://www.securityfocus.com/bid/99545
CVE ID: CVE-2016-8951 State: PUBLISHED Published: 2017-07-13T15:00:00Z Last Updated: 2024-09-17T03:32:58.866Z Vendors: IBM Products: Emptoris Strategic Supply Management Problem Types: Denial of Service Description: IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to a denial of service attack. An attacker can exploit a vulnerability in the authentication features that could log out users and flood user accounts with emails. IBM X-Force ID: 118838. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/118838 - http://www.ibm.com/support/docview.wss
cus.com/bid/99589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/118838 - http://www.ibm.com/support/docview.wss?uid=swg22005839
CVE ID: CVE-2016-8952 State: PUBLISHED Published: 2017-07-13T15:00:00Z Last Updated: 2024-09-16T19:36:18.106Z Vendors: IBM Products: Emptoris Strategic Supply Management Problem Types: Cross-Site Scripting Description: IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118839. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/118839 - http://www.securityfo
CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/118839 - http://www.securityfocus.com/bid/99589 - http://www.ibm.com/support/docview.wss?uid=swg22005839
CVE ID: CVE-2016-8953 State: PUBLISHED Published: 2017-07-12T17:00:00Z Last Updated: 2024-09-16T22:41:20.355Z Vendors: IBM Products: Emptoris Sourcing Problem Types: Gain Access Description: IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 118840. Additional Analyst N
highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 118840. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/118840 - http://www.ibm.com/support/docview.wss?uid=swg22005549 - http://www.securityfocus.com/bid/99545
CVE ID: CVE-2016-8954 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-06T02:35:02.288Z Vendors: IBM Corporation Products: DashDB Local Problem Types: Gain Access Description: IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21994471 - http://www.securityfocus.com/bid/95628
CVE ID: CVE-2016-8960 State: PUBLISHED Published: 2017-03-27T22:00:00 Last Updated: 2024-08-06T02:35:02.336Z Vendors: IBM Corporation Products: Cognos Business Intelligence Problem Types: Gain Privileges Description: IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by intercepting the higher-privilege user's cookie value from its HTTP request and then reusing it in subsequent requests. IBM Reference #: 1993718. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21993718 - http://www.securityfocus.com/bid/96963