CVE-2018-1626

Name of the Vulnerable Software and Affected Versions IBM Security Privileged Identity Manager Virtual Appliance version 2.2.1

Description The issue allows for session fixation/hijacking, which could force a user to utilize a cookie that may be known to an attacker, as the session variable is not renewed after a successful authentication.

Recommendations For IBM Security Privileged Identity Manager Virtual Appliance version 2.2.1, update the software to a version that renews the session variable after successful authentication to prevent session fixation/hijacking.