Unscored severity · published Jul 23, 2009
CVE-2009-2583
Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1)…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
Tivoli Identity Manager · Ibm
5.0.0.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2583
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2583
Vendor Advisory
http://secunia.com/advisories/35931
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg24023826
Patch
http://www.securityfocus.com/bid/35779
www.securitytracker.com
http://www.securitytracker.com/id?1022597
Patch
http://www.vupen.com/english/advisories/2009/1990
More from Tivoli Identity Manager
7.8
CVE-2014-6111
IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 store…
5.9
CVE-2014-6112
IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 make it…
5.9
CVE-2014-6108
IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 might…
5.3
CVE-2014-6109
IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 allow…
–
CVE-2014-0961
Cross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager (ISIM) 6.0…