IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has logged out of the system but neglected to close their browser. IBM X-Force ID: 110303.
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/110303 | vdb entry vendor advisory |
http://www-01.ibm.com/support/docview.wss?uid=swg21997687 | patch vendor advisory |