CVE-2020-4253

CWE-613 — Insufficient Session Expiration3 documents3 sources
Severity
8.8HIGH
EPSS
0.2%
top 54.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Content Navigator
Timeline
PublishedMar 24
Latest updateMay 24

Description

IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ibm/content_navigator3.0CD

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-8mx2-gx23-v8q6: IBM Content Navigator 3↗2022-05-24
▶
CVEList
CVE-2020-4253: IBM Content Navigator 3↗2020-03-24
▶
CVE-2020-4253 (HIGH CVSS 8.8) | IBM Content Navigator 3.0CD does no | cvebase.io