Lucene search
MitreCVE-2008-4294HistorySep 27, 2008 - 10:30 a.m.
CVE-2008-4294
2008-09-2710:30:03
CWE-264
mitre
web.nvd.nist.gov
23
4
ibm
tivoli
netcool
webtop
session hijacking
cve-2008-4294
security vulnerability
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
20.6%
IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation, as demonstrated by a root session that is still valid after a subsequent read-only session has begun.
Affected configurations
Node
ibmtivoli_netcool_webtopMatch2.1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | tivoli_netcool_webtop | 2.1.0 | cpe:2.3:a:ibm:tivoli_netcool_webtop:2.1.0:*:*:*:*:*:*:* |
References
Social References
More
Related
nvd
nvd
CVE-2008-4294
2008-09-27 10:30:03
prion
prion
Design/Logic Flaw
2008-09-27 10:30:00
cvelist
cvelist
CVE-2008-4294
2008-09-27 00:00:00
nessus
nessus
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
20.6%
Related for CVE-2008-4294