CVE-2023-40695 — IBM Cognos Controller session fixation
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM…
Published: 2024-05-03 · CVSS: 6.3 · CVSS 3.1
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 264938.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7