CVE-2008-4294

IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which allows physically proximate attackers to hijack a session by…

published September 27, 2008

CVSS
—
EPSS
0%
Percentile
32.3
In the wild
Unconfirmed
What it is

IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation, as demonstrated by a root session that is still valid after a subsequent read-only session has begun.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00395 · 32.3th percentile
Published
2008-09-27T00:00Z
EPSS history
Timeline
  • 27 SEP 00:00Z
    IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which allows physically proximate attackers to hijack a session by…
    cvelistv5