Unscored severity · published Dec 31, 2004
CVE-2004-2558
Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allow remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka "Potential Credential Impersonation Attack."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TA
Tivoli Access Manager For E-business · Ibm
3.9; 4.1; 5.1 · source: NVD
TA
Tivoli Access Manager Identity Manager Solution · Ibm
5.1 · source: NVD
TC
Tivoli Configuration Manager · Ibm
4.2 · source: NVD
TC
Tivoli Configuration Manager For Atm · Ibm
2.1 · source: NVD
TS
Tivoli Secureway Policy Director · Ibm
3.8 · source: NVD
WE
Websphere Everyplace Server · Ibm
2.1.3; 2.1.4; 2.1.5 · source: NVD
Affected product
TA
Tivoli Access Manager For E-business
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2558
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2558
Vendor Advisory
http://secunia.com/advisories/11761
Patch
http://www-1.ibm.com/support/docview.wss?uid=swg21168762
Patch
http://www.securityfocus.com/bid/10449
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16315
More from Tivoli Access Manager For E-business
6.1
CVE-2017-1489
IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability
–
CVE-2011-0494
Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before…
–
CVE-2010-4622
Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files…
–
CVE-2010-4623
WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service (worker thread consumption)…
–
CVE-2010-4120
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to…