Netty and Play Framework Session Hijacking Vulnerability

🗓️ 27 Jun 2015 00:00:00Reported by China National Vulnerability DatabaseType

cnvd

cnvd🔗 www.cnvd.org.cn👁 3 Views

Netty and Play Framework have a session hijacking vulnerability allowing unauthorized access.

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty affect watsonx.data	3 Sep 202420:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product	20 May 202014:01	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Netty, IBM Operations Analytics - Log Analysis is affected by denial of service, information disclosure, and HTTP request smuggling	6 Apr 202617:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®	19 Apr 202116:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java and IBM WebSphere Application Server Liberty	18 Dec 202409:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerable netty classes from couchdb affecting IBM Knowledge Catalog for IBM Cloud Pak for Data	10 Jun 202421:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector	22 Dec 202520:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	2 Dec 202121:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	10 Mar 202121:20	–	ibm
Chainguard	CVE-2015-2156 vulnerabilities	10 Apr 202602:13	–	cgr

Source	Link
securityfocus	www.securityfocus.com/bid/74704

01 Jul 2015 00:00Current

7High risk

Vulners AI Score7

CVSS 24.3

CVSS 37.5

EPSS0.05434

Netty Play Framework Session hijacking Unauthorized access Vulnerability