Critical severity9.8NVD Advisory· Published Jun 20, 2022· Updated Jun 17, 2026
CVE-2022-22317
CVE-2022-22317
Description
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 218281.
Affected products
48.0.0, 8.0.1+ 3 more
- (no CPE)range: 8.0.0, 8.0.1
- (no CPE)range: 8.0.0
- cpe:2.3:a:ibm:curam_social_program_management:8.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:curam_social_program_management:8.0.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.ibm.com/support/pages/node/6596049nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/218281nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.