IBM Security Verify Directory versions 10.0.0 through 10.0.4 and version 11.0.0 are affected by a session fixation vulnerability. This flaw allows an attacker to establish a session and then hijack the authenticated session after the victim logs in, potentially gaining unauthorized access to the directory management console.