CVE-2020-4696

CVSS 5.3 MEDIUMEPSS 0.7%

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.3EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

30 nov 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which could allow an authenticated user to obtain sensitive information from the previous session. IBM X-Force ID: 186789.

CVSS:3.0/A:N/UI:N/S:U/C:L/AV:N/PR:N/I:N/AC:L/E:U/RC:C/RL:O

Produtos afetados

IBM · Cloud Pak for Security

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/186789 https://www.ibm.com/support/pages/node/6372528