high8.8
CVE-2021-39066
IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated se…
Impact
IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Financial Transaction Manager | Version 3.2.4 |