← Database

CVE-2004-2558

HIGH CVSS: 7.5 Published: 2004-12-31 Modified: 2026-06-16

Description

Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allow remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka "Potential Credential Impersonation Attack."

Affected Platforms

Ibm Tivoli Secureway Policy DirectorIbm Websphere Everyplace ServerIbm Tivoli Access Manager Identity Manager SolutionIbm Tivoli Configuration ManagerIbm Tivoli Access Manager For E-BusinessIbm Tivoli Configuration Manager For Atm

Weakness Type

NVD-CWE-Other

References