Description
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote attackers to access sessions by leveraging an unattended workstation.
Metrics
CVSS 2.0 2.1/10
AV:L/AC:L/Au:N/C:N/I:P/A:NWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Nov 18, 2014
- Last modified
- Jun 17, 2026
- NVD status
- Modified