CVE-2009-2583

Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2009-07-23

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Tivoli Identity Manager (Ibm)

References

• http://secunia.com/advisories/35931
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659
• http://www-01.ibm.com/support/docview.wss?uid=swg24023826
• http://www.securityfocus.com/bid/35779
• http://www.securitytracker.com/id?1022597
• http://www.vupen.com/english/advisories/2009/1990