Vulnerabilities > CVE-2020-4914 - Insufficient Session Expiration vulnerability in IBM Cloud PAK System
Attack vector
LOCAL Attack complexity
LOW Privileges required
HIGH Confidentiality impact
LOW Integrity impact
LOW Availability impact
LOW Summary
IBM Cloud Pak System Suite 2.3.3.0 through 2.3.3.5 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 191290.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |