First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-38986

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 212942.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
IBM	MQ Appliance	9.2 LTS; 9.2 CD

References

Timeline

Published: Mar 1, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-389885.5IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial o CVE-2021-389895.5IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial o CVE-2021-38997.8There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute ar CVE-2021-389907.8IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to c CVE-2021-389917.8IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lea CVE-2021-389935.5IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the smbcd daemon to cause a denial CVE-2021-389945.5IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial o CVE-2021-389955.5IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial o CVE-2021-389965.5IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial o CVE-2021-389975.4IBM API Connect V10.0.0.0 through V10.0.5.0, V10.0.1.0 through V10.0.1.7, and V2018.4.1.0 through 2018.4.1.19 is vulnerable to HTTP header i CVE-2021-389995.5IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace.CVE-2021-39006.5firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

CVE-2021-38986: Medium severity, CVSS 5.4 | Vulnix