Skip to content
Sign in
4.7 Medium

CVE-2022-38382 IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0…

Description

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672.

Affected products and versions

Product Affected versions Fixed in
QRadar Suite Software 1.10 1.10.12.0 → 1.10.23.0 No fix stated
Cloud Pak for Security 1.10 1.10.0.0 → 1.10.11.0 No fix stated

Other CVEs of QRadar Suite Software

The 20 CVEs of QRadar Suite Software →
CVE-2025-25020 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could… 6.5 Medium CVE-2025-1334 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows… 4.0 Medium CVE-2025-25021 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could… 7.2 High CVE-2025-25022 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could… 9.6 Critical
Track this CVE