Vulnerability in IBM Tivoli Netcool Webtop

CVE-2008-4294

IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation, as demonstrated by a root session that is still valid after a subsequent read-only session has begun.

EPSS: 0.004 (32.2th percentile) — read the EPSS interpretation.

Affected products

Ibm Tivoli_netcool_webtop — versions 2.1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)