Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-38018 EUVD-2023-41845GHSA-64r8-pw62-6prc

IBM Aspera Shares session fixation

Published Aug 9, 2024 · Updated Aug 9, 2024 · Assigned by ibm

Description

IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 260574.

Affected products

VendorProductAffectedFixed
IBM Aspera Shares 1.10.0 PL2 —

References