CVE-2020-4229: IBM Mobile Foundation

High severity, CVSS 7.3. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain unauthorized access to a user's session. IBM X-Force ID: 175211.

Affected products

• IBM Mobile Foundation: version 8.0.0.0 only

Published 2020-06-05. Last modified 2026-06-17.