Skip to content
Threat Feed
Subscribe

Tag

Session-Token

2 briefs RSS
high advisory

IBM Engineering AI Hub Information Disclosure via URL Session Tokens (CVE-2026-15322)

A remote attacker can exploit CVE-2026-15322 in IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0 to obtain sensitive session tokens exposed in URLs, potentially leading to unauthorized access and information disclosure.

Engineering AI Hub 1.0.0 +2 vulnerability information-disclosure session-token ibm cve
1t 1c
low advisory

AWS IAM API Calls via Temporary Session Tokens

Detection of AWS IAM API operations using temporary session credentials, indicating potential credential theft, session hijacking, or privileged role abuse for persistence and defense evasion.

AWS Identity and Access Management +2 cloud aws iam session-token persistence privilege-escalation
3r 2t