PT-2024-11613
CVE-2022-38382
·
تاريخ النشر
2024-08-13
·
تاريخ التحديث
2024-09-21
الوصف من
CVSS 3.1
4.7
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Cloud Pak for Security (CP4S) versions 1.10.0.0 through 1.10.11.0
IBM QRadar Suite Software versions 1.10.12.0 through 1.10.23.0
Description
The issue is related to the failure to invalidate a session after logout, which could allow another authenticated user to obtain sensitive information. This could lead to unauthorized access.
Recommendations
For IBM Cloud Pak for Security (CP4S) versions 1.10.0.0 through 1.10.11.0, upgrade to a version that contains the fix for this issue.
For IBM QRadar Suite Software versions 1.10.12.0 through 1.10.23.0, upgrade to a version that contains the fix for this issue.
As a temporary workaround, consider implementing additional access controls to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾