CVE-2022-38382

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672.

Score

CVSS 3.1 4.7 Medium

Status

Modified - psirt@us.ibm.com

Published

2024-08-13

Last modified

2024-09-21

Weaknesses

CWE-613

Affected products

• Cloud Pak For Security (Ibm)
• Qradar Suite (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/233672
• https://www.ibm.com/support/pages/node/7165286