medium6.3
CVE-2025-36377
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate anot…
Impact
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Qradar Edr | from 3.12.0 before 3.12.24 |