← Database

CVE-2024-49825

MEDIUM CVSS: 6.3 Published: 2025-04-14 Modified: 2026-06-17

Description

IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

Affected Platforms

Ibm Robotic Process AutomationIbm Robotic Process Automation For Cloud Pak

Weakness Type

CWE-613

References