CVE-2023-38018

Publication date

2024-08-09 16:25:10

Family

ibm

State

PUBLISHED

Description

IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 260574.