4.3
Medium
CVE-2021-20431 IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow…
Description
IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtain sensitive information from the system. IBM X-Force ID: 196342.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| i2 Analyst's Notebook Premium 9.2 | 9.2.0 → 9.2.2 | No fix stated |