CVE-2023-38018

Summary

CVE-2023-38018 refers to a vulnerability in IBM Aspera Shares 1.10.0 PL2. This issue allows an authenticated user to impersonate another user on the system after a password change, as the session is not invalidated. This means that the previous user's session remains active, potentially granting unauthorized access to the affected system. IBM X-Force has assigned ID 260574 to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.