CVE-2004-2558

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allow remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka "Potential Credential Impersonation Attack."

Affected (10)

Products: Ibm: Tivoli Access Manager For E Business, Tivoli Access Manager Identity Manager Solution, Tivoli Configuration Manager, Tivoli Configuration Manager For Atm, Tivoli Secureway Policy Director, Websphere Everyplace Server

Ibm

6 products

Tivoli Access Manager For E Business

Tivoli Access Manager Identity Manager Solution

Tivoli Configuration Manager

Tivoli Configuration Manager For Atm

Tivoli Secureway Policy Director

Websphere Everyplace Server

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Access Manager For E Business	Version 3.9
Ibm Tivoli Access Manager For E Business	Version 4.1
Ibm Tivoli Access Manager For E Business	Version 5.1
Ibm Tivoli Access Manager Identity Manager Solution	Version 5.1
Ibm Tivoli Configuration Manager	Version 4.2
Ibm Tivoli Configuration Manager For Atm	Version 2.1
Ibm Tivoli Secureway Policy Director	Version 3.8
Ibm Websphere Everyplace Server	Version 2.1.3
Ibm Websphere Everyplace Server	Version 2.1.4
Ibm Websphere Everyplace Server	Version 2.1.5