| Package | Affected versions | Patched versions |
|---|---|---|
| operations analytics - log analysis | ≥ 1.3.5.0, ≤ 1.3.5.3≥ 1.3.6.0, ≤ 1.3.6.1≥ 1.3.7.0, ≤ 1.3.7.2≥ 1.3.8.0, ≤ 1.3.8.4 |
IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 does not invalidate session after a password chance which could allow an authenticated user to impersonate another user on the system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free