Description
IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Financial Transaction Manager
3.0.2affected2.1.1affected3.1.0affected3.0.5affected3.0.6affected3.0.0affected3.2.2affected3.2.3affected3.2.4affected
References
- https://www.ibm.com/support/pages/node/6388702 ↗
- https://www.ibm.com/support/pages/node/6388744 ↗
- https://www.ibm.com/support/pages/node/6388708 ↗
- https://www.ibm.com/support/pages/node/6388706 ↗
- https://www.ibm.com/support/pages/node/6388704 ↗
- https://www.ibm.com/support/pages/node/6388722 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/183328 ↗