NetSight
IP …
medium5.4

CVE-2020-4555

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user …

Impact

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328.

Affected products

VendorProductAffected versions
IbmFinancial Transaction Manager
Versions 2.1.1.0, 3.0.0, 3.0.2, 3.0.5, 3.0.6, 3.1.0

Weakness classification

CWE-384

References