CVE-2019-14480: Exposure of Sensitive Information to an Unauthorized Actor

AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges...

PT-2020-9558

Name of the Vulnerable Software and Affected Versions: AdRem NetCrunch version 10.6.0.4587 Description: The issue is related to improper session handling in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges. Recommendations: For AdRem NetCrunch versi...

Microweber Session Expires Improperly Vulnerability

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber. An attacker can exploit the vulnerability...

Design/Logic Flaw

Immuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout...

CVE-2020-15950

Immuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout...

CVE-2020-15950

CVE-2020-15950 affects Immuta v2.8.2. The vulnerability is described as improper session management, where user sessions are not revoked upon logout. This indicates a potential persistence of sessions after logout, as stated in the provided descriptions. No explicit exploitation details, affected...

PT-2020-18695

Name of the Vulnerable Software and Affected Versions Nessus versions 8.11.0 and earlier Description The issue is related to improper session expiration, which could allow attackers with local access to login into an existing browser session. Recommendations For versions 8.11.0 and earlier, updat...

PT-2020-17941

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Virtual Appliance Description The issue allows a remote attacker to obtain sensitive information using man-in-the-middle techniques due to the improper invalidation of session...

Authentication flaw

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary commands...

CVE-2020-3144: Improper Access Control

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary commands...

PT-2020-3109

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV110W versions not specified Cisco Small Business RV130 versions not specified Cisco Small Business RV130W versions not specified Cisco Small Business RV215W versions not specified Description The issue is related to...

PT-2020-18100

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Client versions 8.1.7.0 through 8.1.9.1 IBM Spectrum Protect for Space Management versions 8.1.7.0 through 8.1.9.1 Description The issue is related to improper session validation in the web user interfaces, which could all...

Security Bulletin: A vulnerability in IBM Websphere Application Server affects the IBM Performance Management product (CVE-2019-4304)

Summary A vulnerability in IBM Websphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validation. IBM Performance Management has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4304 DESCRIPTION: IBM...

Improper Session Handling

php is vulnerable to improper session handling. The vulnerability exists as an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL...

PT-2020-12215

Name of the Vulnerable Software and Affected Versions Janus versions through 0.9.1 Description The issue is related to a race condition in the VideoCall plugin, specifically in the plugins/janus videocall.c file, which causes improper session management. This happens because some references are...

PT-2020-18514

Name of the Vulnerable Software and Affected Versions GRANDIT versions 1.6 through 3.0 Description The issue allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors due to improper session management. Recommendations For GRANDIT...

CVE-2019-4304: Session Fixation

IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validation. IBM X-Force ID: 160950...

CVE-2016-10801

cPanel before 58.0.4 has improper session handling for shared users SEC-139...

CVE-2016-10801

Affected product: cPanel. Vulnerability CVE-2016-10801 exists in versions before 58.0.4 due to improper session handling for shared users (SEC-139). Root cause: flawed session management in the system. Impact described by CVSS3 as high (C/H/I/A) with base score 8.8; CVSS2 as 6.5. Mitigation: upgr...

CVE-2016-10801: Improper Neutralization of Special Elements in Output Used by a Downstream Component

cPanel before 58.0.4 has improper session handling for shared users SEC-139...