medium6.3
CVE-2023-40695
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user o…
Impact
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 264938.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cognos Controller | Versions 10.4.1, 10.4.2, 11.0.0 |