CVE-2020-4395: IBM Security Access Manager Appliance

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 179358.

Affected products

• IBM Security Access Manager Appliance: version 9.0.7 only

Published 2020-10-14. Last modified 2026-06-17.