CVE-2020-4914: IBM Cloud Pak System

Medium severity, CVSS 4.2. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM Cloud Pak System Suite 2.3.3.0 through 2.3.3.5 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 191290.

Affected products

• IBM Cloud Pak System: from 2.3.3.0, before 2.3.3.6 (fixed in 2.3.3.6)

Published 2023-05-05. Last modified 2026-06-17.