CVE-2023-38018

NVD Published Date: August 12, 2024 at 01:38 PM
NVD Last Modified: August 29, 2024 at 02:36 PM
Download Patch
Vulnerability ID
CVE-2023-38018
Severity
MEDIUM
Severity Score
5.4
Summary
IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 260574.
References
Mitigation and Patches
-
Exploits
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CWE ID
CWE-384

Recent Publish

CVE-2023-50809

CVE-2023-50810

CVE-2022-38322

2024-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5039214)

2024-06 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5039214)

2024-06 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5039214)

See SecOps Solution
in action

Schedule Demo
Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions
hello@secopsolution.com
+569-231-213
Compare
Qualys Cloud Agent Tenable Nessus Rapid7 InsightVM
Company
About Us Contact Career
Resources
CVE Windows KB Case Studies eBooks Policy Templates Blog Webinar
Try It
Patch Astra EPSS Calculator Contact Free Scan Schedule Demo Log In
© 2024  SecOps Solution, Inc.| Privacy Policy | Terms and Conditions .
Social Media :