CVE-2024-49825

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-613

Affected software

Vendor	Product	Versions
IBM	Robotic Process Automation	>= 21.0.0, <= 21.0.7.20; >= 23.0.0, <= 23.0.20
IBM	Robotic Process Automation for Cloud Pak	>= 21.0.0, <= 21.0.7.20; >= 23.0.0, <= 23.0.20

References

https://www.ibm.com/support/pages/node/7230848Vendor Advisory

Timeline

Published: Apr 14, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-498277.5IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access sensitive information withou CVE-2024-498287.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 CVE-2024-498297.8Memory corruption can occur during context user dumps due to inadequate checks on buffer length.CVE-2024-49835.4The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to CVE-2024-498307.8Memory corruption while processing an IOCTL call to set mixer controls.CVE-2024-498327.8Memory corruption in Camera due to unusually high number of nodes passed to AXI port.CVE-2024-498337.8Memory corruption can occur in the camera when an invalid CID is used.CVE-2024-498347.8Memory corruption while power-up or power-down sequence of the camera sensor.CVE-2024-498357.8Memory corruption while reading secure file.CVE-2024-498367.8Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.CVE-2024-498377.8Memory corruption while reading CPU state data during guest VM suspend.CVE-2024-498387.5Information disclosure while parsing the OCI IE with invalid length.