| Package | Affected versions | Patched versions |
|---|---|---|
| security identity manager adapter | = 7.0.0.0= 7.0.0.1= 7.0.0.2= 7.0.0.3= 7.0.1.0= 7.0.1.1 |
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of "traffic records."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free