Skip to content
OpenAdvisories
Unscored CVE-2016-0339 EUVD-2016-0374GHSA-v7rp-w5fr-2xrx

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers a…

Published Jul 15, 2016 · Updated Aug 5, 2024 · Assigned by ibm

Description

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of "traffic records."

References