6.3
Medium
CVE-2020-4253 IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to…
Description
IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Content Navigator | 3.0CD | No fix stated |
Other CVEs of Content Navigator
The 32 CVEs of Content Navigator →
CVE-2026-1243
IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting
5.4
Medium
CVE-2025-27906
IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon…
5.3
Medium
CVE-2024-51475
IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection
5.4
Medium
CVE-2024-56341
IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting
5.4
Medium