CVE-2022-40228

 

Published at: - 22-11-2022 08:15

Last modified: - 22-11-2022 08:17

Total changes: - 1

Description

IBM DataPower Gateway 10.0.3.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.9, 2018.4.1.0 through 2018.4.1.22, and 10.5.0.0 through 10.5.0.2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235527.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://www.ibm.com/support/pages/node/6840759
• https://exchange.xforce.ibmcloud.com/vulnerabilities/235527

 

Keywords

NVD

 

CVE-2022-40228

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures