Skip to content
OpenAdvisories
Medium · 6.3 CVE-2020-4555 EUVD-2020-25802GHSA-32xw-6g8c-rxjj

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to imper…

Published Dec 21, 2020 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Financial Transaction Manager

Description

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328.

Affected products

VendorProductAffectedFixed
IBM Financial Transaction Manager 3.0.2, 2.1.1, 3.1.0, 3.0.5, 3.0.6, 3.0.0, 3.2.2, 3.2.3, 3.2.4 —

References