medium6.3
CVE-2023-38018
IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the sys…
Impact
IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 260574.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aspera Shares | Version 1.10.0 |