CVE-2019-4152

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager versions 9.0.1 through 9.0.6

Description The issue is related to the improper invalidation of session tokens, which may allow attackers with local access to log into a closed browser session due to the lack of timely session expiration.

Recommendations For versions 9.0.1 through 9.0.6, consider implementing a workaround to enforce proper session expiration and invalidation of session tokens to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.