CVE-2025-25019

Name of the Vulnerable Software and Affected Versions IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0

Description The issue arises because the software does not invalidate a session after a user logs out, potentially allowing a user to impersonate another user on the system.

Recommendations For IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0, update to a version that properly invalidates sessions after logout. For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to a version that properly invalidates sessions after logout.