Lucene search

China National Vulnerability DatabaseCNVD-2024-09948

HistoryFeb 22, 2024 - 12:00 a.m.

IBM PowerSC Session Fixation Vulnerability (CNVD-2024-09948)

2024-02-2200:00:00

China National Vulnerability Database

www.cnvd.org.cn

ibm

powersc

session fixation

vulnerability

power systems

servers

security

compliance

session disabling

impersonation

attacker

cnvd

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

18.9%

JSON

IBM PowerSC is an International Business Machines (IBM) security and compliance solution for IBM Power Systems servers. A session fixation vulnerability exists in IBM PowerSC, which stems from a failure to disable a session after logging out, and can be exploited by an attacker to impersonate another user on the system.