Описание
IBM DevOps Automation 1.0.1 and IBM DevOps Loop 1.0.2 does not invalidate session IDs after expiration which could allow an authenticated user to impersonate another user on the system.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:devops_automation:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:devops_loop:1.0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00329
Низкий
8.1 High
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-613
Связанные уязвимости
CVSS3: 8.1
github
около 2 месяцев назад
IBM DevOps Automation 1.0.1 and IBM DevOps Loop 1.0.2 does not invalidate session IDs after expiration which could allow an authenticated user to impersonate another user on the system.
EPSS
Процентиль: 25%
0.00329
Низкий
8.1 High
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-613