CVE-2020-4555

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user…

Medium · published December 21, 2020

CVSS v3.0
6.3
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/S:U/UI:N/AV:N/PR:L/AC:L/I:L/C:L/A:L/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00764 · 54.9th percentile
Published
2020-12-21T17:50Z
EPSS history
Timeline
  • 21 DEC 17:50Z
    IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user…
    cvelistv5