Description
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | QRadar Suite Software | 1.10.12.0 – ≤ 1.10.23.0 | — |
| IBM | Cloud Pak for Security | 1.10.0.0 – ≤ 1.10.11.0 | — |
References
- https://www.ibm.com/support/pages/node/7165286 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/233672 vdb-entry