CVE-2009-2583: IBM Tivoli Identity Manager

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces.

Affected products

• IBM Tivoli Identity Manager: version 5.0.0.6 only

Published 2009-07-23. Last modified 2026-06-16.