CVE-2020-4395

IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the…

Medium · published October 14, 2020

CVSS v3.0
6.3
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 179358.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/A:L/UI:N/C:L/AC:L/S:U/I:L/AV:N/PR:L/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00562 · 45.9th percentile
Published
2020-10-14T16:35Z
EPSS history
Timeline
  • 14 OCT 16:35Z
    IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the…
    cvelistv5