Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54649
HistoryJun 22, 2022 - 12:00 a.m.

IBM Curam Social Program Management code issue vulnerability (CNVD-2022-54649)

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
ibm
curam
social program management
code issue
vulnerability
authentication
impersonation
session invalidation
version 8.0.0
version 8.0.1

EPSS

0.001

Percentile

51.1%

IBM Curam Social Program Management is a business and technology solution from IBM that provides pre-built health and social program components, business processes, toolsets and interfaces on top of a dynamically configurable architecture. A code issue vulnerability exists in versions 8.0.0 and 8.0.1, which stems from a failure to invalidate a session after logging out, and can be exploited by an authenticated attacker to impersonate another user on the system.

EPSS

0.001

Percentile

51.1%

Related for CNVD-2022-54649