| Package | Affected versions | Patched versions |
|---|---|---|
| mq | ≥ 9.2.0, < 9.2.0.4≥ 9.2.0, < 9.2.5 | 9.2.0.49.2.5 |
IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 212942.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free