CVE-2019-4439

published 2019-07-25

CVE-2019-4439: IBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could allow a local user to impersonate another user on the system…

medium 5.3 CVSS 3.1

AV L AC L PR L UI N S U C L I L A L

IBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 162949.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ibm	cloud_private	—	—
ibm	cloud_private	—	—
ibm	cloud_private	—	—

CWE-384