Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2fpx-8j38-3gp6

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation.

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation.

EPSS

Процентиль: 42%
0.00198
Низкий

7.4 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 7.4
nvd
больше 9 лет назад

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation.

EPSS

Процентиль: 42%
0.00198
Низкий

7.4 High

CVSS3

Дефекты

CWE-284