Skip to content
OpenAdvisories
Unscored CVE-2016-6040 EUVD-2016-6974GHSA-gwpf-pfph-7ff7

IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced.

Published Feb 1, 2017 · Updated Aug 6, 2024 · Assigned by ibm

Vendor: IBM Product: Rational Collaborative Lifecycle Management

Description

IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced.

Affected products

VendorProductAffectedFixed
IBM Rational Collaborative Lifecycle Management 3.0.1, 4.0, 3.0.1.6, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 5.0, 4.0.7, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3 —

References