IBM Security Guardium 11.5: Session Expiration Inadequacy Enables Takeover
CVE-2023-0041 Published on June 5, 2023
IBM Security Guardium session fixation
IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration. IBM X-Force ID: 243657.
Vulnerability Analysis
CVE-2023-0041 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.
Weakness Type
Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."
Products Associated with CVE-2023-0041
Want to know whenever a new CVE is published for IBM Security Guardium? stack.watch will email you.
Affected Versions
IBM Security Guardium Version 11.5 is affected by CVE-2023-0041Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.