CVE

Id
10984  
CVE No.
CVE-2004-2558  
Status
Candidate  
Description
Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allow remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka "Potential Credential Impersonation Attack."  
Phase
Assigned (20051121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
77082 10984 CVE-2004-2558 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21168762  View
77083 10984 CVE-2004-2558 BID:10449  View
77084 10984 CVE-2004-2558 URL:http://www.securityfocus.com/bid/10449  View
77085 10984 CVE-2004-2558 SECUNIA:11761  View
77086 10984 CVE-2004-2558 URL:http://secunia.com/advisories/11761  View
77087 10984 CVE-2004-2558 XF:ibm-cookie-session-hijack(16315)  View

Related JVN