Lucene search
HistoryOct 07, 2022 - 5:15 p.m.
CVE-2022-41291
ibm infosphere
session vulnerability
user impersonation
ibm x-force id
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
19.8%
IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 236699.
Affected configurations
Node
ibmaixMatch-
ORlinuxlinux_kernelMatch-
ORmicrosoftwindowsMatch-
ibminfosphere_information_serverMatch11.7
Related
prion
prion
Design/Logic Flaw
2022-10-07 17:15:00
cve
cve
CVE-2022-41291
2022-10-07 17:15:10
ibm
ibm
cnvd
cnvd
IBM InfoSphere Information Server code issue vulnerability
2022-10-10 00:00:00
cvelist
cvelist
CVE-2022-41291
2022-10-06 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
19.8%
Related for NVD:CVE-2022-41291