Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.Referenceshttp://www.ibm.com/support/docview.wss?uid=swg21995754http://www.securityfocus.com/bid/95090
