CVE-2022-22317

CRITICAL · CVSS 9.8 EPSS 0.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-06-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-22317

Severity

CRITICAL

CVSS

9.8

EPSS

0.49%

Original NVD Description

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 218281.