CVE Vulnerabilities

CVE-2022-32759

Insufficient Session Expiration

Published: Jul 25, 2024 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain sensitive information. IBM X-Force ID: 228565.

Weakness

According to WASC, “Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.”

Affected Software

Name Vendor Start Version End Version
Security_directory_integrator Ibm 7.2.0 (including) 7.2.0 (including)
Security_directory_server Ibm - (including) - (including)
Security_verify_access Ibm 10.0.0 (including) 10.0.0 (including)

Potential Mitigations

References