PT-2019-17083 · Ibm · Ibm Cloud Private
CVE-2019-4439
·
Publicado
2019-07-25
·
Atualizado
2022-12-03
CVSS v3.1
5.3
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
IBM Cloud Private versions 3.1.0 through 3.1.2
Description
The issue allows a local user to impersonate another user on the system because it does not invalidate the session after logout.
Recommendations
For versions 3.1.0 through 3.1.2, consider implementing a custom session invalidation mechanism after user logout as a temporary workaround until a patch is available.
Correção
Session Fixation
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Cloud Private