CVE-2022-22318

published 2022-06-20

CVE-2022-22318: IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—

CWE-613