Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2020-4555

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-

Description

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Financial Transaction Manager

  • 3.0.2affected
  • 2.1.1affected
  • 3.1.0affected
  • 3.0.5affected
  • 3.0.6affected
  • 3.0.0affected
  • 3.2.2affected
  • 3.2.3affected
  • 3.2.4affected

References