CVE-2023-0041

IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration. IBM X-Force ID: 243657.

• CWE-613
• CWE-613

• https://exchange.xforce.ibmcloud.com/vulnerabilities/243657VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/7000021Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/243657VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/7000021Patch, Vendor Advisory

Published

Jun 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0035softbus_client_stub in communication subsystem within OpenHa…7.8
• CVE-2023-0036platform_callback_stub in misc subsystem within OpenHarmony-…7.8
• CVE-2023-0037The 10Web Map Builder for Google Maps WordPress plugin befor…9.8
• CVE-2023-0038The "Survey Maker – Best WordPress Survey Plugin" plugin for…6.1
• CVE-2023-0039Rejected reason: Duplicate. Please use CVE-2022-4060 instead…
• CVE-2023-0040Versions of Async HTTP Client prior to 1.13.2 are vulnerable…7.5
• CVE-2023-0042An issue has been discovered in GitLab CE/EE affecting all v…6.1
• CVE-2023-0043The Custom Add User WordPress plugin through 2.0.2 does not …6.1
• CVE-2023-0044If the Quarkus Form Authentication session cookie Path attri…6.1
• CVE-2023-0045The current implementation of the prctl syscall does not iss…7.5
• CVE-2023-0046Improper Restriction of Names for Files and Other Resources …7.2
• CVE-2023-0047Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…