CVE-2024-22358CWE-613

IBM UrbanCode Deploy session fixation

Medium · published April 12, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 280896.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.3th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2024-04-12T16:53Z
EPSS history
Timeline
  • 12 APR 16:53Z
    IBM UrbanCode Deploy session fixation
    cvelistv5