CVE-2021-39066

published 2022-02-02

CVE-2021-39066: IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	financial_transaction_manager	—	—

CWE-384