CVE-2022-34334

IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the…

Medium · published October 10, 2022

CVSS v3.0
6.3
EPSS
0%
Percentile
33.6
In the wild
Unconfirmed
What it is

IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 229704.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/I:L/UI:N/AC:L/C:L/A:L/PR:L/AV:N/S:U/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00404 · 33.6th percentile
Published
2022-10-10T20:43Z
EPSS history
Timeline
  • 10 OCT 20:43Z
    IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the…
    cvelistv5