Medium · 6.3 CVE-2021-39066 EUVD-2021-25503GHSA-xj2w-28hg-8jjr

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to st…

Published Feb 2, 2022 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040.

References

https://www.ibm.com/support/pages/node/6527892
ibm-ftm-cve202139066-session-fixation (215040) vdb-entry