IBM Security Verify Privilege Manager Access Control Error Vulnerability

IBM Security Verify Privilege Manager is a security management software from International Business Machines (IBM) for endpoint privilege management and application control in corporate environments. The software stops unintentional downloads of malware and ransomware from attacking applications by removing local administrative privileges from endpoints, making it easy to enforce least privilege and application control immediately with IBM Security Privilege Manager. An access control error vulnerability exists in IBM Security Verify Privilege On-Premises version 11.5, which stems from insufficient handling of session expiration times and can be exploited by an attacker to obtain sensitive information.