Design/Logic Flaw

2016-07-1518:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.3%

JSON

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of “traffic records.”

CPENameOperatorVersion
security_identity_manager_adaptereq7.0.1.0
security_identity_manager_adaptereq7.0.0.1
security_identity_manager_adaptereq7.0.0.2
security_identity_manager_adaptereq7.0.0.0
security_identity_manager_adaptereq7.0.0.3
security_identity_manager_adaptereq7.0.1.1

Name	Operator	Version
security_identity_manager_adapter	eq	7.0.1.0
security_identity_manager_adapter	eq	7.0.0.1
security_identity_manager_adapter	eq	7.0.0.2
security_identity_manager_adapter	eq	7.0.0.0
security_identity_manager_adapter	eq	7.0.0.3
security_identity_manager_adapter	eq	7.0.1.1