CVE-2020-4395

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager Appliance version 9.0.7

Description The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout.

Recommendations For IBM Security Access Manager Appliance version 9.0.7, consider implementing a workaround to manually invalidate sessions after logout until a patch is available. As a temporary mitigation measure, restrict access to sensitive areas of the system to minimize the risk of impersonation.