← CVE Intelligence

CVE-2024-40683

IBM Operations Analytics - Log Analysis is affected by a TOCTOU weakness allowing active sessions to persist beyond a password change PUBLISHED

Description (CNA)

IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 does not invalidate session after a password chance which could allow an authenticated user to impersonate another user on the system.

Affected (CNA)

Vendor / productVersions
IBM / Operations Analytics - Log Analysisaffected 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3; affected 1.3.6.0, 1.3.6.1; affected 1.3.7.0, 1.3.7.1, 1.3.7.2; affected 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4

CWE

CWE-613

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.