← Zurück zur CVE-Suche

CVE-2025-36359

IBM DevOps Automation

Beschreibung

IBM DevOps Automation 1.0.1 and IBM DevOps Loop 1.0.2 does not invalidate session IDs after expiration which could allow an authenticated user to impersonate another user on the system.

CVSS 8.1EPSS 0.193%Risiko 0.82
Quelle öffnen
Veröffentlicht
2026-06-30 21:16:30
Betroffene Versionen
==1.0.1
Typ
Kritische Software
Vektor
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N