Session Management Flaw in IBM Security Identity Governance and Intelligence
CVE-2020-4995

4MEDIUM

Key Information:

Vendor

IBM
Status
Security Identity Governance And Intelligence
Vendor
CVE Published:
9 February 2021

What is CVE-2020-4995?

A session management vulnerability exists in IBM Security Identity Governance and Intelligence version 5.2.6, allowing users to maintain access without proper session invalidation post-logout. This flaw could enable an attacker to potentially access sensitive information from another user's session, compromising user privacy and data security. Organizations should consider applying updates promptly to mitigate unauthorized access risks.

Affected Version(s)

Security Identity Governance and Intelligence 5.2.6

References

https://www.ibm.com/support/pages/node/6413393
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/192912
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.