Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-45187

IBM Engineering Lifecycle Optimization - Publishing session fixation

Description

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 268749.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Engineering Lifecycle Optimization - Publishing

Default version status: unaffected

  • 7.0.2, 7.0.3affected

References