CVE-2020-4395

published 2020-10-14

CVE-2020-4395: IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the…

medium 5.4 CVSS 3.1

AV N AC L PR L UI N S U C L I L A N

IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 179358.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	security_access_manager_appliance	—	—

CWE-613