Session Management Flaw in IBM Cloud Private Affecting User Authentication

CVE-2019-4439

What is CVE-2019-4439?

IBM Cloud Private versions 3.1.0, 3.1.1, and 3.1.2 contain a session management vulnerability that fails to properly invalidate user sessions after logout. This weakness can be exploited by a local attacker to impersonate other users on the system, potentially leading to unauthorized access or actions performed in the context of the targeted user. Proper session management is crucial for maintaining security and preventing unauthorized access to sensitive data and resources.

References