CVE-2020-4555: Medium severity IBM Financial Transaction Manager Cps Services vulnerability
IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328.
Other sources
IBM Financial Transaction Manager for High Value Payments for Multi-Platform does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-4555.
What is the severity level of CVE-2020-4555?
CVE-2020-4555 has a severity level of medium.
Which software versions are affected by CVE-2020-4555?
CVE-2020-4555 affects IBM Financial Transaction Manager versions 2.1.1.0, 3.0.0, 3.0.2, 3.0.5, 3.0.6, 3.1.0, 3.2.1, 3.2.2, 3.2.3, 3.2.4.
How does CVE-2020-4555 impact the system?
CVE-2020-4555 allows an authenticated user to impersonate another user on the system due to session not being invalidated after logout.
Are there any resources available for further information about CVE-2020-4555?
Yes, you can find more information about CVE-2020-4555 at the following links: [1] [2] [3].