Privilege Escalation Vulnerability in IBM Security Access Manager

CVE-2019-4135

What is CVE-2019-4135?

IBM Security Access Manager versions 9.0.1 through 9.0.6 contain a security flaw that allows authenticated users to impersonate other users, potentially compromising the integrity of user sessions and sensitive data. This vulnerability enables a malicious actor with valid credentials to gain unauthorized access, raise their privilege level, and perform actions on behalf of other users, thereby posing significant security risks to organizations relying on this software.

References