CVE-2004-2558
IBM Tivoli SecureWay Policy Director <5.1 - Session Hijacking
Title source: llmDescription
Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allow remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka "Potential Credential Impersonation Attack."
References (4)
Core 4
Core References
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/10449
Patch, Vendor Advisory x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21168762
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/11761
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16315
Scores
EPSS
0.0155
EPSS Percentile
72.5%
Details
Status
published
Products (10)
ibm/tivoli_access_manager_for_e-business
3.9
ibm/tivoli_access_manager_for_e-business
4.1
ibm/tivoli_access_manager_for_e-business
5.1
ibm/tivoli_access_manager_identity_manager_solution
5.1
ibm/tivoli_configuration_manager
4.2
ibm/tivoli_configuration_manager_for_atm
2.1
ibm/tivoli_secureway_policy_director
3.8
ibm/websphere_everyplace_server
2.1.3
ibm/websphere_everyplace_server
2.1.4
ibm/websphere_everyplace_server
2.1.5
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026