Description
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21985736
- 1036255 vdb-entry
- 91692 vdb-entry