Medium · 6.3 CVE-2021-20378 EUVD-2021-7796GHSA-7mrw-f6g3-g543

IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an authenticated user to …

Published Jul 7, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Guardium Data Encryption

Description

IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 195709.

Affected products

Vendor	Product	Affected	Fixed
IBM	Guardium Data Encryption	3.0.0.2, 4.0.0.4	—

References

https://www.ibm.com/support/pages/node/6469407
ibm-guardium-cve202120378-sessoin-fixation (195709) vdb-entry