7.5
CVE-2004-2558
- EPSS 1.55%
- Veröffentlicht 31.12.2004 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:09:52
- Erkennungen
LoginUnspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allow remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka "Potential Credential Impersonation Attack."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Tivoli Access Manager For E-business Version 3.9
Ibm ≫ Tivoli Access Manager For E-business Version 4.1
Ibm ≫ Tivoli Access Manager For E-business Version 5.1
Ibm ≫ Tivoli Access Manager Identity Manager Solution Version 5.1
Ibm ≫ Tivoli Configuration Manager Version 4.2
Ibm ≫ Tivoli Configuration Manager For Atm Version 2.1
Ibm ≫ Tivoli Secureway Policy Director Version 3.8
Ibm ≫ Websphere Everyplace Server Version 2.1.3
Ibm ≫ Websphere Everyplace Server Version 2.1.4
Ibm ≫ Websphere Everyplace Server Version 2.1.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.55% | 0.718 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/11761
http://www-1.ibm.com/support/docview.wss?uid=swg21168762
http://www.securityfocus.com/bid/10449
https://exchange.xforce.ibmcloud.com/vulnerabilities/16315