← CVE Intelligence

CVE-2022-38382

IBM Cloud Pak for Security session fixation PUBLISHED

Description (CNA)

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672.

Affected (CNA)

Vendor / productVersions
IBM / QRadar Suite Softwareaffected 1.10.12.0 through 1.10.23.0
IBM / Cloud Pak for Securityaffected 1.10.0.0 through 1.10.11.0

CWE

CWE-613

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.