CVE-2009-2583 - Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces

Back Back to CVE browser

MEDIUM

Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces

Published Jul 23, 2009

6.8

MEDIUM

CVSS 2.0

EPSS 1.38%

Description

Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (6)

http://secunia.com/advisories/35931
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659
vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg24023826
x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/bid/35779
vdb-entryx_refsource_BIDPatch
http://www.securitytracker.com/id?1022597
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/1990
vdb-entryx_refsource_VUPENPatchVendor Advisory

Link	Providers	Tags
http://secunia.com/advisories/35931		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659		vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg24023826		x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/bid/35779		vdb-entryx_refsource_BIDPatch
http://www.securitytracker.com/id?1022597		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/1990		vdb-entryx_refsource_VUPENPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 23, 2009

Updated Aug 7, 2024

Reserved Jul 23, 2009

Link CVE-2009-2583

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-2583

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-2583