Skip to content
Sign in
5.6 Medium

CVE-2020-4229 IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session,…

Description

IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain unauthorized access to a user's session. IBM X-Force ID: 175211.

Affected products and versions

Product Affected versions Fixed in
MobileFirst Platform Foundation 8.0.0.0 No fix stated

Other CVEs of MobileFirst Platform Foundation

The 3 CVEs of MobileFirst Platform Foundation →
CVE-2020-4226 IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters 5.9 Medium CVE-2017-1772 IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting 6.1 Medium
Track this CVE