EUVD-2021-25503

Malware in sbrugna...

CVE-2021-39066

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040...

CVE-2021-39066

Summary: CVE-2021-39066 affects IBM Financial Transaction Manager for SWIFT Services (multiplatform) version 3.2.4. The vulnerability arises because the product does not invalidate an existing session after certain events, enabling an attacker to hijack an authenticated session. This is documente...