CVE-2024-22351

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-22351
IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

6.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7229921 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:*:*:*:*
OR cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

08 Jul 2025, 19:54

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7229921 - () https://www.ibm.com/support/pages/node/7229921 - Vendor Advisory
CPE cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
First Time Ibm aix
Linux
Microsoft
Ibm
Microsoft windows
Linux linux Kernel
Ibm infosphere Information Server
Summary
  • (es) IBM InfoSphere Information 11.7 Server no invalida la sesión después de cerrar la sesión, lo que podría permitir que un usuario autenticado se haga pasar por otro usuario en el sistema.

23 Apr 2025, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-23 23:15

Updated : 2025-07-08 19:54

NVD link : CVE-2024-22351

Mitre link : CVE-2024-22351

CVE.ORG link : CVE-2024-22351

JSON object : View

Products Affected

microsoft

  • windows

linux

  • linux_kernel

ibm

  • infosphere_information_server
  • aix
CWE
CWE-613

Insufficient Session Expiration