CVE-2024-40683
EUVD-2024-5570430.07.2026, 19:16
IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 does not invalidate session after a password chance which could allow an authenticated user to impersonate another user on the system.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | operations_analytics_-_log_analysis | 1.3.5.0 ≤ 𝑥 ≤ 1.3.5.3 |
| ibm | operations_analytics_-_log_analysis | 1.3.6.0 ≤ 𝑥 ≤ 1.3.6.1 |
| ibm | operations_analytics_-_log_analysis | 1.3.7.0 ≤ 𝑥 ≤ 1.3.7.2 |
| ibm | operations_analytics_-_log_analysis | 1.3.8.0 ≤ 𝑥 ≤ 1.3.8.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration