PT-2020-18046
CVE-2020-4395
·
تاريخ النشر
2020-10-14
·
تاريخ التحديث
2020-10-26
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security Access Manager Appliance version 9.0.7
Description
The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout.
Recommendations
For IBM Security Access Manager Appliance version 9.0.7, consider implementing a workaround to manually invalidate sessions after logout until a patch is available. As a temporary mitigation measure, restrict access to sensitive areas of the system to minimize the risk of impersonation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾