CVE-2020-4555

Katalog CVE

CVSS 5.4 · Medium EPSS 0,76%

Kerentanan Session Fixation pada ibm financial transaction manager. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328.

Rincian

Terbit di NVD

21 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-384: Session Fixation

EPSS (30 hari)

0,76% peluang dieksploitasi; lebih tinggi dari 54,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://exchange.xforce.ibmcloud.com/vulnerabilities/183328 vdb entry · advisory vendor
• https://www.ibm.com/support/pages/node/6388702 patch · advisory vendor
• https://www.ibm.com/support/pages/node/6388704 patch · advisory vendor
• https://www.ibm.com/support/pages/node/6388706 patch · advisory vendor
• https://www.ibm.com/support/pages/node/6388708 patch · advisory vendor
• https://www.ibm.com/support/pages/node/6388722 patch · advisory vendor
• https://www.ibm.com/support/pages/node/6388744 patch · advisory vendor