6.5
CVE-2022-40230
- EPSS 0.29%
- Veröffentlicht 03.11.2022 20:15:31
- Zuletzt bearbeitet 02.05.2025 21:15:18
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
Login"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Mq Appliance Version9.2.0.0 SwEditioncontinuous_delivery
Ibm ≫ Mq Appliance Version9.2.0.0 SwEditionlts
Ibm ≫ Mq Appliance Version9.3.0.0 SwEditioncontinuous_delivery
Ibm ≫ Mq Appliance Version9.3.0.0 SwEditionlts
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.29% | 0.521 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
|
CWE-613 Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."