CVE-2022-38382

medium

Description

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672.

References

https://www.ibm.com/support/pages/node/7165286

https://exchange.xforce.ibmcloud.com/vulnerabilities/233672

Details

Source: Mitre, NVD

Published: 2024-08-13

Updated: 2024-09-21

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 4.1

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.00033