CVE:CVE-2013-5426
CNNVD:CNNVD-201312-404
IBM InfoSphere Master Data Management Server for Product Information Management（IBM InfoSphere MDM Server for PIM）是美国IBM公司的一套企业产品信息管理解决方案。IBM InfoSphere Master Data Management（MDM） - Collaborative Edition是一套为产品信息管理（PIM）提供协同编辑的解决方案。
IBM InfoSphere MDM中存在会话固定漏洞。远程攻击者可利用该漏洞劫持Web会话。以下版本受到影响：IBM InfoSphere MDM - Collaborative Edition 10.0，10.1，11.0；IBM InfoSphere MDM Server for PIM 9.0，9.1。
solution:Upgrade ibm infosphere_master_data_management_collaboration_server to a higher version than 10.0,10.1,11.0,and avoid the version 10.0,10.1,11.0; Upgrade ibm infosphere_master_data_management_server_for_product_information_management to a higher version than 9.0,9.1,and avoid the version 9.0,9.1