Session Management Vulnerability in IBM Curam Social Program Management
CVE-2022-22318
What is CVE-2022-22318?
IBM Curam Social Program Management versions 8.0.0 and 8.0.1 exhibit a session management flaw that fails to properly invalidate user sessions upon logout. This oversight allows an authenticated user the potential to impersonate another user within the system, posing a significant security risk. Proper session handling is essential for ensuring user integrity and confidentiality within applications. It is crucial for users of affected versions to be aware of this issue and to apply any patches or updates provided by IBM to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Curam Social Program Management 8.0.0
Curam Social Program Management 8.0.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved