IBM i2 iBase Information Disclosure Vulnerability (CNVD-2021-94902)

IBM i2 iBase is an intuitive intelligence data management application that helps analysts in collaborative teams capture, control, and analyze data from multiple sources in a highly secure workgroup environment. i2 iBase versions 8.9.13, 9.0.0 are vulnerable to information disclosure. The vulnerability stems from insufficient session expiration. A local attacker could exploit the vulnerability to obtain sensitive information.