CVE-2023-50941

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

IBM PowerSC 1.3, 2.0, and 2.1 does not provide logout functionality, which could allow an authenticated user to gain access to an unauthorized user using session fixation. IBM X-Force ID: 275131.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-384

Affected software

Vendor	Product	Versions
IBM	PowerSC	1.3, 2.0, 2.1

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/275131VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/7113759Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/275131VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/7113759Patch, Vendor Advisory

Timeline

Published: Feb 2, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-509437.5Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protec CVE-2023-509446.5Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which th CVE-2023-509455.5IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.CVE-2023-509466.5IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a brok CVE-2023-509475.4IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed CVE-2023-509489.8IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its o CVE-2023-509498.1IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation. IBM X-Force ID CVE-2023-509505.3IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules. IBM X-Force ID: 275709.CVE-2023-509514.3IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 in some circumstances will log some s CVE-2023-509525.4IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send CVE-2023-509534.3IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message CVE-2023-509545.3IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the sy