CVE-2020-4229

IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain…

Medium · published June 5, 2020

CVSS v3.0
5.6
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain unauthorized access to a user's session. IBM X-Force ID: 175211.

The record
Technical detail
CVSS v3.0
5.6 · MEDIUM
Vector
CVSS:3.0/AV:N/C:L/PR:N/AC:H/UI:N/A:L/I:L/S:U/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.00850 · 57.8th percentile
Published
2020-06-05T12:55Z
EPSS history
Timeline
  • 05 JUN 12:55Z
    IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain…
    cvelistv5