Описание
IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
Одно из
cpe:2.3:a:ibm:jazz_reporting_service:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:*:*:*:*:*:*:*
Одно из
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 37%
0.00161
Низкий
6.6 Medium
CVSS3
7.2 High
CVSS3
Дефекты
CWE-613
Связанные уязвимости
CVSS3: 6.6
github
10 месяцев назад
IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.
EPSS
Процентиль: 37%
0.00161
Низкий
6.6 Medium
CVSS3
7.2 High
CVSS3
Дефекты
CWE-613