Skip to content
OpenAdvisories
Medium · 4.8 CVE-2025-25019 EUVD-2025-16757GHSA-2wgg-6f6v-vvvx

IBM QRadar Suite Software and IBM Cloud Pak for Security session fixation

Published Jun 3, 2025 · Updated Aug 24, 2025 · Assigned by ibm

Vendor: IBM Product: Cloud Pak for Security Product: QRadar Suite Software

Description

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not invalidate session after a logout which could allow a user to impersonate another user on the system.

Affected products

VendorProductAffectedFixed
IBM QRadar Suite Software 1.10.12.0 – ≤ 1.11.2.0 —
IBM Cloud Pak for Security 1.10.0.0 – ≤ 1.10.11.0 —

References