CVE-2020-4555

Published: Dec 21, 2020Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328.

Affected (13)

Products: Ibm: Financial Transaction Manager

1 product

Financial Transaction Manager

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Ibm Financial Transaction Manager	Version 2.1.1.0
Ibm Financial Transaction Manager	Version 3.0.0
Ibm Financial Transaction Manager	Version 3.0.2
Ibm Financial Transaction Manager	Version 3.0.2
Ibm Financial Transaction Manager	Version 3.0.5
Ibm Financial Transaction Manager	Version 3.0.6
Ibm Financial Transaction Manager	Version 3.1.0
Ibm Financial Transaction Manager	Version 3.2.1
Ibm Financial Transaction Manager	Version 3.2.2
Ibm Financial Transaction Manager	Version 3.2.3
Ibm Financial Transaction Manager	Version 3.2.4
Ibm Financial Transaction Manager	Version 3.2.4
Ibm Financial Transaction Manager	Version 3.2.4

Related CWEs

Session Fixation

Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

References (14)

https://exchange.xforce.ibmcloud.com/vulnerabilities/183328

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6388702

Source: psirt@us.ibm.com

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6388704

Source: psirt@us.ibm.com

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6388706

Source: psirt@us.ibm.com

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6388708

Source: psirt@us.ibm.com

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6388722

Source: psirt@us.ibm.com

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6388744

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/183328

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6388702

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6388704

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6388706

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6388708

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6388722

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6388744

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.