Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-49344 EUVD-2025-4607GHSA-f6r9-68xj-457v

IBM OpenPages session fixation

Published Feb 20, 2025 · Updated Aug 15, 2025 · Assigned by ibm

Description

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages

with Watson Assistant chat feature enabled the application establishes a session when a user logs in and uses chat, but the chat session is still left active after logout.

Affected products

VendorProductAffectedFixed
IBM OpenPages with Watson 8.3, 9.0 —

References