VYPR
← All advisories
Medium severity4.4NVD Advisory· Published Mar 16, 2020· Updated Jun 17, 2026

CVE-2019-4617

CVE-2019-4617

Description

IBM Cloud Automation Manager 3.2.1.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 168645.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • IBM/Cloud Automation Manager3 versions
    cpe:2.3:a:ibm:cloud_automation_manager:3.2.1.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:cloud_automation_manager:3.2.1.0:*:*:*:*:*:*:*
    • (no CPE)range: 3.2.1.0
    • (no CPE)range: 3.2.1.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.