IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain sensitive information. IBM X-Force ID: 228565.
Weakness
According to WASC, “Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.”
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Security_directory_integrator | Ibm | 7.2.0 (including) | 7.2.0 (including) |
| Security_directory_server | Ibm | - (including) | - (including) |
| Security_verify_access | Ibm | 10.0.0 (including) | 10.0.0 (including) |