Medium · 5.9 CVE-2022-22317 EUVD-2022-27463GHSA-24vj-7479-5mqc

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to imp…

Published Jun 20, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Curam Social Program Management

Description

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 218281.

Affected products

Vendor	Product	Affected	Fixed
IBM	Curam Social Program Management	8.0.0, 8.0.1	—

References

https://www.ibm.com/support/pages/node/6596049
ibm-curam-cve202222317-session-fixation (218281) vdb-entry