CVE-2016-0234

Published: Aug 30, 2018Modified: Nov 21, 2024

3.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has logged out of the system but neglected to close their browser. IBM X-Force ID: 110303.

Affected (3)

Products: Ibm: Openpages Grc Platform

Ibm

1 product

Openpages Grc Platform

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Openpages Grc Platform	From 7.1.0.0 to 7.1.0.3
Ibm Openpages Grc Platform	From 7.2.0.0 to 7.2.0.2
Ibm Openpages Grc Platform	Version 7.3.0.0

Related CWEs

CWE-613

Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21997687

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/110303

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21997687

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/110303

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

Timeline

No history available yet.