CVE-2022-22318

creationtimestamp| type| source ---|---|--- 2022-06-20 20:26:35+00:00| seen| https://t.me/cibsecurity/44838...

CVE-2022-22318

IBM Curam Social Program Management (Cúram SPM) versions 8.0.0–8.0.1 are affected by a session timeout issue where the system does not invalidate a user’s session after logout, enabling an authenticated user to impersonate another user. IBM’s Security Bulletin (CVE-2022-22318) states the vulnerab...

Security Bulletin: Cúram Social Program Management is affected by session timeout issues (CVE-2022-22318, CVE-2022-22317)

Summary IBM Cúram Social Program Management is affected by session timeout issues. For these vulnerabilities some modal dialogs in SPM do not invalidate the session after timeout or logout, which could allow an authenticated user to impersonate another user on the system. Vulnerability Details...