Description
IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely manner. The lack of proper session expiration may allow attackers with local access to login into a closed browser session. IBM X-Force ID: 158515.
Remediation
References
Related Vulnerabilities
WordPress Plugin Gwolle Guestbook Multiple Vulnerabilities (2.1.0)
WordPress Plugin WP Responsive Testimonials Slider And Widget Cross-Site Scripting (1.5)
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4553)
Oracle JRE CVE-2019-2973 Vulnerability (CVE-2019-2973)
Drupal Core 9.0.x Cross-Site Request Forgery (9.0.0 - 9.0.14)