CVE-2008-4294: IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which allows ph...

Security readout for executives and security teams

IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 may keep a previous user’s cached privileges after logout. Someone physically at an unattended workstation could inherit stronger access than intended. The business concern is shared operations consoles or administrator workstations, not broad internet-scale compromise. Exposure is most likely in legacy IBM Tivoli Netcool/Webtop 2.1 environments, especially NOC/SOC workstations, shared terminals, kiosks, or admin consoles where users switch sessions without closing the browser or locking the host. Treat as moderate priority for environments still running this legacy product on shared or privileged workstations. Prioritize faster if operations teams use persistent consoles or if physical access controls are weak. Mitigation focus: Identify any IBM Tivoli Netcool/Webtop 2.1 deployments and confirm maintenance level.; Upgrade affected systems to 2.1.0.5 or later where supported by IBM guidance.; Require workstation lock, browser closure, or session reset after privileged Webtop use..

Prepared

Jun 28, 2026, 11:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.