← Back

CVE-2024-40683

nvd nist
Published: Jul 30, 2026Modified: Aug 12, 2026

JSON object

Loading...
6.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Exploitability: 2.8 / Impact: 3.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 does not invalidate session after a password chance which could allow an authenticated user to impersonate another user on the system.

Affected (4)

Ibm
1 product
Operations Analytics Log Analysis
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Operations Analytics Log Analysis
From 1.3.5.0 to 1.3.5.3
Operations Analytics Log Analysis
From 1.3.6.0 to 1.3.6.1
Operations Analytics Log Analysis
From 1.3.7.0 to 1.3.7.2
Operations Analytics Log Analysis
From 1.3.8.0 to 1.3.8.4

Related CWEs

CWE-613
Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.