Description (CNA)
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Curam Social Program Management | affected 8.0.0; affected 8.0.1 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/pages/node/6596049
- https://exchange.xforce.ibmcloud.com/vulnerabilities/218283
ADP enrichment
No English description supplied.