CVE-2020-4696

CVSS 5.3 MEDIUMEPSS 0.7%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

30 Nov 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which could allow an authenticated user to obtain sensitive information from the previous session. IBM X-Force ID: 186789.

CVSS:3.0/A:N/UI:N/S:U/C:L/AV:N/PR:N/I:N/AC:L/E:U/RC:C/RL:O

Affected products

IBM · Cloud Pak for Security

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/186789 https://www.ibm.com/support/pages/node/6372528