Insecure Session

github.com/flyteorg/flyteadmin is vulnerable to insecure session. The vulnerability exists in ValidateAccessToken function in resourceserver.go because the access token keys are not properly validated which allows an attacker to access the server using expired tokens...

CVE-2022-26647

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...

CVE-2022-26647

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...

Insecure Session

github.com/heroiclabs/nakama is vulnerable to insecure session. The vulnerability exists because session tokens on logout are not properly validated which allows an attacker to send requests with old tokens to authenticate to the application...

Insecure Session

hoteldruid has insecure session token. The vulnerability exists due to an exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2022-25752

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

Insecure Session Validation

IBM MQ has insecure session validation. The vulnerability exists due to the lack of validation of the session after logout, which allows an attacker to impersonate the user...

Insecure Session

IBM MQ is vulnerable to insecure session. The vulnerability exists due to an error where users are not disconnected when they logout allowing an attacker to conduct a session fixation attack...

in cortezaproject/corteza-server

Description During testing it was found that if a user revoke his all active session, then also user is able to make changes to his account. Proof of Concept 1. Log in to the application 2. Go to profilelogin sessions and revoke all sessions. 3. You will see that all other sessions are still vali...

Insecure Session

DayByDay CRM has insecure session. The vulnerability exists due to the lack of sufficient session expiry restriction when a user change password, allowing the user to still continue the same session...

Insecure Session Management

github.com/sipcapture/homer-app uses insecure session management. The vulnerability exists as the JWT secret key is hard coded in constants.go file, allowing a user to gain unauthorized access to the application if the default secret key is not changed...

Insecure Session Management

apostrophe uses insecure session management. The session object does not exist in task requests, allowing a malicious user to hijack logged-in user's sessions recently...

CVE-2020-23036

MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the password authentication parameter of the wifi photo transfer module. This vulnerability allows attackers with network access privileges or on public wifi networks to re...

CVE-2020-23036

CVE-2020-23036 affects MEDIA NAVI Inc SMACom v1.2 in the wifi photo transfer module. Root cause: insecure session validation in the password authentication parameter allows MITM attackers on network/public Wi‑Fi to read credentials and follow-up requests containing the user password. Impact: cred...

CVE-2020-23036

MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the password authentication parameter of the wifi photo transfer module. This vulnerability allows attackers with network access privileges or on public wifi networks to re...

MEDIA NAVI Inc SMACom 安全漏洞

MEDIA NAVI Inc SMACom is a software that allows you to transfer photos and movies taken by your smartphone to your PC without using a USB cable or SD card. A security vulnerability exists in MEDIA NAVI Inc SMACom, which originated when MEDIA NAVI Inc SMACom v1.2 was found to contain an insecure...

PT-2021-10813 · Media Navi · Media Navi Inc Smacom

Name of the Vulnerable Software and Affected Versions: MEDIA NAVI Inc SMACom version 1.2 Description: The issue is related to an insecure session validation in the session handling of the password authentication parameter of the wifi photo transfer module. This allows attackers with network acces...

Insecure Session ID

org.eclipse.jetty, jetty-server has Insecure Session ID. The vulnerability exists due the SessionListenersessionDestroyed not validating the session ID if an exception is thrown...

Insecure Session Management

vault uses insecure session management. Vault and Vault Enterprise renewed nearly-expiring token leases and dynamic secret leases with a zero-second TTL, causing them to be treated as non-expiring, and never revoked...

Insecure Session Management

github.com/ory/fosite uses insecure session management. The vulnerability exists as it fails to validate the uniqueness of this jti value in privatekeyjwt client authentication method, allowing an attacker to send the same token request twice with the same jti assertion to get two access tokens...