CVE-2023-49881

Medium CVSS: 6.3

IBM Transformation Extender Advanced 10.0.1

does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

Vendor

Ibm

Product

Transformation Extender Advanced

CWE

CWE-613

Yayın Tarihi

2025-10-01 17:15:37

Güncelleme

2025-10-03 17:38:09

Source Identifier

psirt@us.ibm.com

KEV Date Added

Kategoriler

CWE-613 Transformation Extender Advanced MEDIUM Ibm 2025

Referanslar

https://www.ibm.com/support/pages/node/7246882

Benzer Kayıtlar

Low

CVE-2025-66487

IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send em…

Medium

CVE-2025-66486

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co…

Medium

CVE-2025-66485

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by…

Medium

CVE-2025-66484

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to…

Medium

CVE-2025-66483

IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an authentic…

Medium

CVE-2025-36375

IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and I…