VulnerabilityModified
CVE-2009-2583
Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces.
MEDIUM 6.8EPSS 1.38%
Does this matter?
Lower severity and a low EPSS score (1.38%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.38% probability · 71th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- ibm/tivoli identity manager
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/35931Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24023826Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35779Patch
- http://www.securitytracker.com/id?1022597
- http://www.vupen.com/english/advisories/2009/1990Patch, Vendor Advisory
- http://secunia.com/advisories/35931Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24023826Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35779Patch
- http://www.securitytracker.com/id?1022597
- http://www.vupen.com/english/advisories/2009/1990Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.