Description
Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces.
References
- 35779 vdb-entry
- IZ55659 vendor-advisory
- 35931 third-party-advisory
- ADV-2009-1990 vdb-entry
- 1022597 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg24023826