IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/233672 | VDB Entry |
| https://www.ibm.com/support/pages/node/7165286 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Sep 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672. |
12 Sep 2024, 15:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/233672 - VDB Entry | |
| References | () https://www.ibm.com/support/pages/node/7165286 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.1 |
| CPE | cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:qradar_suite:*:*:*:*:*:*:*:* |
|
| First Time |
Ibm cloud Pak For Security
Ibm Ibm qradar Suite |
|
| Summary |
|
13 Aug 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-13 02:15
Updated : 2024-09-21 10:15
NVD link : CVE-2022-38382
Mitre link : CVE-2022-38382
CVE.ORG link : CVE-2022-38382
JSON object : View
Products Affected
ibm
- qradar_suite
- cloud_pak_for_security
CWE
CWE-613
Insufficient Session Expiration