6.3
Moyenne
CVE-2025-36377 IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an…
Description
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security QRadar EDR 3.12 | 3.12 → 3.12.23 | Pas de correctif indiqué |
Autres CVE de Security QRadar EDR
Les 9 CVE de Security QRadar EDR →
CVE-2024-45636
IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local…
4.1
Moyenne
CVE-2025-36376
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an…
6.3
Moyenne
CVE-2025-36379
IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that…
5.9
Moyenne
CVE-2024-45100
IBM Security ReaQta 3.12 could allow a privileged user to cause a denial of service by sending multiple administration…
4.9
Moyenne