CVE-2009-2583

CWE-20 — Improper Input Validation3 documents3 sources

Severity

6.8MEDIUM

EPSS

1.0%

top 22.88%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Tivoli Identity Manager

Timeline

PublishedJul 23

Latest updateMay 2

Description

Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/tivoli_identity_manager5.0.0.6

Patches

Patch: www-01.ibm.com ↗Patch: www.securityfocus.com ↗Patch: www.vupen.com ↗

🔴Vulnerability Details

GHSA

GHSA-5cc8-559g-qhg4: Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5↗2022-05-02

▶

CVEList

CVE-2009-2583: Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5↗2009-07-23

▶