Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-36376 IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another use… https://www.cve.org/CVERecord?id=CVE-2025-36376
Post summary
IBM Security QRadar EDR 3.12 through 3.12.23 suffers a session invalidation flaw that can let an authenticated user impersonate another user.
CVE-2025-36376 Session Impersonation Vulnerability in IBM Security QRadar EDR 3.12 to 3.12.23 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-36376
Post summary
The post announces a session impersonation vulnerability (CVE-2025-36376) affecting IBM Security QRadar EDR 3.12‑3.12.23, with no information on PoC, exploit, active use, patches, or false positives.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ibm | security_qradar_edr | - | - | - |