CVE-2024-22351

published 2025-04-23

CVE-2024-22351: IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the…

medium 6.3 CVSS 3.1

AV N AC L PR L UI N S U C L I L A L

IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	infosphere_information_server	—	—
ibm	infosphere_information_server	>= 11.7 < 11.7.1	11.7.1

CWE-613