Lucene search
Redhat.comRH:CVE-2018-1127HistoryMay 08, 2018 - 5:18 a.m.
CVE-2018-1127
2018-05-0805:18:59
redhat.com
access.redhat.com
6
0.002 Low
EPSS
Percentile
58.4%
Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few minutes allowing attackers to replay tokens acquired via sniffing/MITM attacks and authenticate as the target user.
Related
prion
prion
Session fixation
2018-09-11 15:29:00
nessus
nessus
RHEL 7 : RHGS WA (RHSA-2018:2616)
2018-09-06 00:00:00
cve
cve
CVE-2018-1127
2018-09-11 15:29:00
nvd
nvd
CVE-2018-1127
2018-09-11 15:29:00
veracode
veracode
Replay Attack
2019-01-15 09:24:43
cvelist
cvelist
CVE-2018-1127
2018-09-11 15:00:00
redhat
redhat
(RHSA-2018:2616) Low: RHGS WA security, bug fix, and enhancement update
2018-09-04 06:28:16