CVE-2024-49344: falha de média gravidade em IBM OpenPages with Watson
IBM OpenPages session fixation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.3%
IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages
with Watson Assistant chat feature enabled the application establishes a session when a user logs in and uses chat, but the chat session is still left active after logout.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
IBM · OpenPages with WatsonCVEs relacionadas — IBM OpenPages with Watson
No mesmo produto, das mais perigosas para as menos.
CVE-2021-29907HIGHCVE-2021-29907EPSS 1.5%CVE-2023-40683HIGHIBM OpenPages with Watson privilege escalationEPSS 0.7%CVE-2024-49780MEDIUMIBM OpenPages path traversalEPSS 0.6%CVE-2023-38738MEDIUMIBM OpenPages with Watson information disclosureEPSS 0.5%CVE-2024-49781HIGHIBM OpenPages XML external entity injectionEPSS 0.5%CVE-2024-35151MEDIUMIBM OpenPages information disclosureEPSS 0.4%