CVE-2020-4538

CVE-2020-4538 affects IBM Security Identity Manager (ISIM) 6.0.0. The vulnerability arises from reuse of another user’s JSESSIONID, enabling a privileged local user to perform unauthorized actions. IBM's bulletin confirms the issue and assigns a CVSS Base score of 6.7. Remediation provided: upgra...

Security Bulletin: A security vulnerability has been fixed in IBM Security Identity Manager (CVE-2020-4538)

Summary IBM Security Identity Manager has addressed the following vulnerability due to allowing a privileged local user to perform unauthorized actions Vulnerability Details CVEID: CVE-2020-4538 DESCRIPTION: IBM Security Identity Manager could allow a privileged local user to perform unauthorized...