CVE-2016-6043

Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.

Score

CVSS 3.0 7.0 High

Status

Modified - psirt@us.ibm.com

Published

2017-02-01

Last modified

2024-08-06

Weaknesses

CWE-384

Affected products

• Tivoli Storage Manager (Ibm)
• Tivoli Storage Manager Extended Edition (Ibm Corporation)

References

• http://www.ibm.com/support/docview.wss?uid=swg21995754
• http://www.securityfocus.com/bid/95090