Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9r58-7qgh-qjq2

Опубликовано: 14 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

EPSS

Процентиль: 17%
0.00053
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 6.3
nvd
10 месяцев назад

IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

EPSS

Процентиль: 17%
0.00053
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-613