Lucene search
IbmCVELIST:CVE-2023-0041HistoryJun 05, 2023 - 12:53 a.m.
CVE-2023-0041 IBM Security Guardium session fixation
2023-06-0500:53:27
CWE-613
ibm
www.cve.org
6
ibm security guardium
session fixation
insufficient session expiration
ibm x-force id
cve-2023-0041
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
AI Score
8.2
Confidence
High
EPSS
0.001
Percentile
33.8%
IBM Security Guardium 11.5 could allow a user to take over another user’s session due to insufficient session expiration. IBM X-Force ID: 243657.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Security Guardium",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "11.5"
}
]
}
]Related
cve
cve
CVE-2023-0041
2023-06-05 01:15:45
nvd
nvd
CVE-2023-0041
2023-06-05 01:15:45
prion
prion
Session fixation
2023-06-05 01:15:00
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
AI Score
8.2
Confidence
High
EPSS
0.001
Percentile
33.8%
Related for CVELIST:CVE-2023-0041