Podatność CVE-2024-38315


Publikacja: 2024-09-16

Opis:
IBM Aspera Shares 1.0 through 1.10.0 PL3 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.

Typ:

CWE-613

(Insufficient Session Expiration)

 Referencje:
https://www.ibm.com/support/pages/node/7168379
https://exchange.xforce.ibmcloud.com/vulnerabilities/294742

Copyright 2024, cxsecurity.com

 

Back to Top