CVE-2021-39066

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated…

Medium · published February 2, 2022

CVSS v3.0
6.3
EPSS
1%
Percentile
50.3
In the wild
Unconfirmed
What it is

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/I:L/A:L/AC:L/UI:N/PR:L/C:L/AV:N/S:U/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00643 · 50.3th percentile
Published
2022-02-02T12:04Z
EPSS history
Timeline
  • 02 FEB 12:04Z
    IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated…
    cvelistv5