IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/233672 | VDB Entry |
| https://www.ibm.com/support/pages/node/7165286 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Sep 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672. |
12 Sep 2024, 15:37
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.1 |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/233672 - VDB Entry | |
| References | () https://www.ibm.com/support/pages/node/7165286 - Vendor Advisory | |
| Summary |
|
|
| First Time |
Ibm qradar Suite
Ibm cloud Pak For Security Ibm |
|
| CPE | cpe:2.3:a:ibm:qradar_suite:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:* |
13 Aug 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-13 02:15
Updated : 2024-09-21 10:15
NVD link : CVE-2022-38382
Mitre link : CVE-2022-38382
CVE.ORG link : CVE-2022-38382
JSON object : View
Products Affected
ibm
- qradar_suite
- cloud_pak_for_security
CWE
CWE-613
Insufficient Session Expiration