Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-36377 Session Hijacking Vulnerability in IBM Security QRadar EDR 3.12 to 3.12.23 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-36377
Post summary
A session hijacking vulnerability (CVE-2025-36377) has been disclosed for IBM QRadar EDR versions 3.12 through 3.12.23, with no PoC, exploit, patch, or active exploitation details provided.
CVE-2025-36377 IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another use… https://www.cve.org/CVERecord?id=CVE-2025-36377
Post summary
The text describes a session‑invalidation flaw in IBM Security QRadar EDR, enabling authenticated user impersonation, but provides no PoC, exploit, patch, or active exploitation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ibm | qradar_edr | - | - | - |