CVE-2020-4253

IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system

Medium · published March 24, 2020

CVSS v3.0
6.3
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/PR:L/AC:L/A:L/AV:N/S:U/UI:N/C:L/I:L/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.00902 · 59.4th percentile
Published
2020-03-24T15:20Z
EPSS history
Timeline
  • 24 MAR 15:20Z
    IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system
    cvelistv5