CVE-2022-22318

🗓️ 20 Jun 2022 16:25:16Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 72 Views

IBM Curam Social Program Management 8.0.0 and 8.0.1 doesn't invalidate session after logout, allowing authenticated user to impersonate another user

Reporter	Title	Published	Views	Family All 10
IBM Security Bulletins	Security Bulletin: Cúram Social Program Management is affected by session timeout issues (CVE-2022-22318, CVE-2022-22317)	17 Jun 202213:52	–	ibm
ATTACKERKB	CVE-2022-22318	17 Jun 202200:00	–	attackerkb
Circl	CVE-2022-22318	20 Jun 202220:26	–	circl
CNNVD	IBM Curam Social Program Management 代码问题漏洞	20 Jun 202200:00	–	cnnvd
CNVD	IBM Curam Social Program Management会话固定漏洞	22 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-22318	20 Jun 202216:25	–	cvelist
EUVD	EUVD-2022-27464	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22318	20 Jun 202217:15	–	nvd
OSV	CVE-2022-22318	20 Jun 202217:15	–	osv
Prion	Code injection	20 Jun 202217:15	–	prion

NVD

Vulners

Node

ibm curam_social_program_managementMatch8.0.0

ibm curam_social_program_managementMatch8.0.1

AND

hp hp-uxMatch-

ibm aixMatch-

ibm z/osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

oracle solarisMatch--

[
  {
    "product": "Curam Social Program Management",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.0"
      },
      {
        "status": "affected",
        "version": "8.0.1"
      }
    ]
  }
]