CVE-2019-4617

Name of the Vulnerable Software and Affected Versions IBM Cloud Automation Manager version 3.2.1.0

Description The issue is related to a session fixation/hijacking vulnerability. It occurs because the session variable is not renewed after a successful authentication, which could force a user to utilize a cookie that may be known to an attacker.

Recommendations For IBM Cloud Automation Manager version 3.2.1.0, consider disabling the authentication mechanism until a patch is available to prevent session fixation/hijacking. Restrict access to sensitive areas of the application to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.