PT-2025-40275 · Ibm · Ibm Transformation Extender Advanced
CVE-2023-49881
·
Published
2023-12-01
·
Updated
2025-10-01
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM Transformation Extender Advanced version 10.0.1
Description
The software does not invalidate the session after a user logs out. This could allow an authenticated user to impersonate another user on the system.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Insufficient Session Expiration
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Transformation Extender Advanced