CVE-2024-45651 — IBM Sterling Connect:Direct Web Services session fixation

CVE-2024-45651

IBM Sterling Connect:Direct Web Services session fixation PUBLISHED

Description (CNA)

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system.

Affected (CNA)

Vendor / product	Versions
IBM / Sterling Connect:Direct Web Services	affected 6.1.0; affected 6.2.0; affected 6.3.0

CWE

CWE-613

References

https://www.ibm.com/support/pages/node/7231178

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.