CVE-2020-4229

IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain unauthorized access to a user's session. IBM X-Force ID: 175211.

Score

CVSS 3.1 7.3 High

Status

Modified - psirt@us.ibm.com

Published

2020-06-05

Last modified

2024-09-16

Weaknesses

CWE-384

Affected products

• Mobile Foundation (Ibm)
• Mobilefirst Platform Foundation (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/175211
• https://www.ibm.com/support/pages/node/6220230