CVEvulnerability
CVE-2009-2583
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-07-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces.
Affected configurations
• ibm tivoli identity manager 5.0.0.6
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/35931 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24023826 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35779 Patch
- http://www.securitytracker.com/id?1022597 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1990 Patch, Vendor Advisory
- http://secunia.com/advisories/35931 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24023826 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35779 Patch
- http://www.securitytracker.com/id?1022597 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1990 Patch, Vendor Advisory