CVE-2023-26288

published 2024-07-30

CVE-2023-26288: IBM Aspera Orchestrator 4.0.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the…

medium 5.5 CVSS 3.1

AV N AC L PR L UI R S U C L I L A L

IBM Aspera Orchestrator 4.0.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 248477.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	aspera_orchestrator	—	—

CWE-613