595 matches found
IBM Sterling Partner Engagement Manager has an unspecified vulnerability (CNVD-2022-68275)
A security vulnerability in IBM Sterling Partner Engagement Manager version 2.0, an automated management tool from International Business Machines Corporation IBM, stems from a failure to invalidate sessions after logging out, which could allow an authenticated user to impersonate another user on...
CVE-2022-34334
Summary: IBM Sterling Partner Engagement Manager (version 2.0) is affected by an authentication/ session management vulnerability that allows an authenticated user to impersonate another user after logout. The issue arises from not invalidating the session, enabling session reuse. Affected produc...
IBM Sterling Partner Engagement Manager 授权问题漏洞
A security vulnerability in IBM Sterling Partner Engagement Manager version 2.0, an automated management tool from International Business Machines Corporation IBM, stems from a failure to invalidate sessions after logging out, which could allow an authenticated user to impersonate another user on...
PT-2022-22136 · Ibm · Ibm Sterling Partner Engagement Manager
Name of the Vulnerable Software and Affected Versions: IBM Sterling Partner Engagement Manager version 2.0 Description: The issue allows an authenticated user to impersonate another user on the system because it does not invalidate the session after logout. Recommendations: For IBM Sterling Partn...
CVE-2022-34334
IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 229704...
IBM InfoSphere Information Server 代码问题漏洞
IBM InfoSphere Information Server is a data integration platform from International Business Machines Corporation IBM that can be used to integrate data information from various sources. The platform can be used to integrate data information obtained from various sources. IBM InfoSphere Informati...
PT-2022-25796 · Ibm · Ibm Infosphere Information Server
Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout. Recommendations: For IBM InfoSphere Information...
CVE-2022-41291
IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 236699...
IBM Curam Social Program Management code issue vulnerability (CNVD-2022-54649)
IBM Curam Social Program Management is a business and technology solution from IBM that provides pre-built health and social program components, business processes, toolsets and interfaces on top of a dynamically configurable architecture. A code issue vulnerability exists in versions 8.0.0 and...
CVE-2022-22318
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...
CVE-2022-22317
CVE-2022-22317 affects IBM Cúram Social Program Management 8.0.0–8.0.1. A code issue causes the session not to be invalidated after logout, enabling an authenticated user to impersonate another user. Connected sources (CNVD-2022-54649, IBM bulletin) confirm the root cause and affected versions, a...
IBM Curam Social Program Management 代码问题漏洞
IBM Curam Social Program Management is a business and technology solution from IBM that provides pre-built health and social program components, business processes, toolsets and interfaces on top of a dynamically configurable architecture. A code issue vulnerability exists in versions 8.0.0 and...
Mattermost Server has Insufficient Session Expiration when used as an OAuth 2.0 service provider
An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidation was mishandled...
Code injection
IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 212942...
IBM MQ Appliance 代码问题漏洞
IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. A code issue vulnerability exists in the IBM MQ Appliance, which stems from the IBM MQ appliance not invalidating a session after logging out, and could be exploited by an...
Design/Logic Flaw
In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It makes it possible for an attacker to reuse the admin cookies either via local/network access or by other hypothetical attacks...
CVE-2021-25992
CVE-2021-25992 (Ifme) affects Ifme versions 1.0.0–7.33.2, where sessions aren’t properly invalidated after logout, enabling reuse of admin cookies via local/network or other attacks. The vulnerability stems from inadequate session invalidation, with high-severity impact (CVE entries report possib...
Ifme 代码问题漏洞
Ifme is open source a mental health experience community that encourages people to share their personal stories with trusted allies. A code issue vulnerability exists in Ifme versions 1.0.0 through v.7.33.2 that stems from a failure to properly invalidate a user's session even after the user...
CVE-2021-25992
In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It makes it possible for an attacker to reuse the admin cookies either via local/network access or by other hypothetical attacks...
