IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7165286 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/233672 | VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Sep 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672. |
12 Sep 2024, 15:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/233672 - VDB Entry | |
| References | () https://www.ibm.com/support/pages/node/7165286 - Vendor Advisory | |
| First Time |
Ibm qradar Suite
Ibm Ibm cloud Pak For Security |
|
| CPE | cpe:2.3:a:ibm:qradar_suite:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.1 |
13 Aug 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-13 02:15
Updated : 2024-09-21 10:15
NVD link : CVE-2022-38382
Mitre link : CVE-2022-38382
JSON object : View
Products Affected
ibm
- cloud_pak_for_security
- qradar_suite
CWE
CWE-613
Insufficient Session Expiration