IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 236699.
References
Link | Resource |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/236699 | VDB Entry Vendor Advisory |
https://www.ibm.com/support/pages/node/6823109 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2022-10-07 10:15
Updated : 2022-10-08 19:40
NVD link : CVE-2022-41291
Mitre link : CVE-2022-41291
JSON object : View
CWE
CWE-613
Insufficient Session Expiration
Products Affected
ibm
- aix
- infosphere_information_server
linux
- linux_kernel
microsoft
- windows