ID | CVE-2024-38315 | ||||||
Sažetak | IBM Aspera Shares 1.0 through 1.10.0 PL3 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system. | ||||||
Reference | |||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | ||||||
Zadnje važnije ažuriranje | 16-09-2024 - 15:30 | ||||||
Objavljeno | 16-09-2024 - 15:15 |