CVE-2022-38382

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Security (CP4S) versions 1.10.0.0 through 1.10.11.0 IBM QRadar Suite Software versions 1.10.12.0 through 1.10.23.0

Description The issue is related to the failure to invalidate a session after logout, which could allow another authenticated user to obtain sensitive information. This could lead to unauthorized access.

Recommendations For IBM Cloud Pak for Security (CP4S) versions 1.10.0.0 through 1.10.11.0, upgrade to a version that contains the fix for this issue. For IBM QRadar Suite Software versions 1.10.12.0 through 1.10.23.0, upgrade to a version that contains the fix for this issue. As a temporary workaround, consider implementing additional access controls to minimize the risk of exploitation.