CVEvulnerability
CVE-2022-22318
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-06-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-613
Description
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
Affected configurations
• ibm curam social program management 8.0.0
• ibm curam social program management 8.0.1
Related
Weakness · not in database (1)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/218283 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6596049 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/218283 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6596049 Patch, Vendor Advisory