Security Bulletin: Session Management vulnerability affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2019-4072)

Summary Session management has a security breach which in some cases can affect the IBM Spectrum Control application. Vulnerability Details CVEID: CVE-2019-4072 DESCRIPTION: IBM Tivoli Storage Productivity Center allows users to remain idle within the application even when a user has logged out...

CVE-2019-4072

IBM Tivoli Storage Productivity Center IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17 allows users to remain idle within the application even when a user has logged out. Utilizing the application back button users can remain logged in as the current user for a short period of time,...

CVE-2019-4072

IBM CVE-2019-4072 affects IBM Tivoli Storage Productivity Center (now IBM Spectrum Control). Versions 5.2.1–5.2.17 allow a user to remain idle in the UI after logout, and, via the back button, stay logged in for a short period, exposing Spectrum Control information. Affected products/versions inc...