Description

IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session. IBM X-Force ID: 140977.

Remediation

References

CVE-2018-1492

Related Vulnerabilities

WordPress Plugin MailPoet Newsletters (Previous) Multiple Unspecified Vulnerabilities (2.7.1)

XWikiplatform Missing Authorization Vulnerability (CVE-2024-31987)

WordPress Plugin WebP Converter for Media Cross-Site Request Forgery (1.0.2)

Highcharts JS Incorrect Regular Expression Vulnerability (CVE-2018-20801)

WebLogic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41184)

Severity

Medium

Classification

CVE-2018-1492 CWE-384 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities