VULNERABILITY INTELLIGENCE

CVE-2021-39066

CVSS score8.8 HIGH
EPSS probability0.64%
CISA KEVNot currently listed
Published2022-02-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040.

Weakness classification

  • nvd@nist.gov: CWE-384

Primary references