medium5.3
CVE-2019-4439
IBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could allow a local user to impersonate another user on the system.
Impact
IBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 162949.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cloud Private | Versions 3.1.0, 3.1.1, 3.1.2 |