2425 matches found
Security Bulletin: Financial Transaction Manager for Digital Payments is affected by a potential logout session timeout (CVE-2020-4555)
Summary Login session may not be invalidated in a timely manner on timeout. Vulnerability Details CVEID: CVE-2020-4555 DESCRIPTION: IBM Financial Transaction Manager for High Value Payments for Multi-Platform does not invalidate session after logout which could allow an authenticated user to...
Security Bulletin: Financial Transaction Manager for High Value Payments is affected by a potential logout session timeout (CVE-2020-4555)
Summary Login session may not be invalidated in a timely manner on timeout. Vulnerability Details CVEID: CVE-2020-4555 DESCRIPTION: IBM Financial Transaction Manager for High Value Payments for Multi-Platform does not invalidate session after logout which could allow an authenticated user to...
Citrix Access Gateway - Logout script configured with UNC path is failed to execute with an error 2 upon logging off from VPN plugin
In the below VPN log snppet, we can see that the Proxy Server configuration and Logout Script configured are pushed once the user has established the VPN session. Once the user has logged out from VPN plugin, the Logout script should get executed and clear the proxy server configuration from...
IBM Financial Transaction Manager 授权问题漏洞
IBM Financial Transaction Manager for High Value Payments for Multi-Platform FTM HVP is a financial transaction manager for multi-platforms from IBM, USA. The product is primarily used to monitor, track and report on financial payments and transactions. An authorization issue vulnerability exists...
phpMyAdmin 4.0.x < 4.0.10.18 / 4.4.x < 4.4.15.9 / 4.6.x < 4.6.5 Multiple Vulnerabilities
According to its self-reported version, the phpMyAdmin application hosted on the remote web server is 4.0.x prior to 4.0.10.18, 4.4.x prior to 4.4.15.9, or 4.6.x prior to 4.6.5. It is, therefore, affected by multiple vulnerabilities. - An issue was discovered in phpMyAdmin. When the user does not...
CVE-2020-4696
IBM Cloud Pak for Security 1.3.0.1CP4S does not invalidate session after logout which could allow an authenticated user to obtain sensitive information from the previous session. IBM X-Force ID: 186789...
Design/Logic Flaw
IBM Cloud Pak for Security 1.3.0.1CP4S does not invalidate session after logout which could allow an authenticated user to obtain sensitive information from the previous session. IBM X-Force ID: 186789...
CVE-2020-4696
IBM Cloud Pak for Security 1.3.0.1CP4S does not invalidate session after logout which could allow an authenticated user to obtain sensitive information from the previous session. IBM X-Force ID: 186789...
PT-2020-18207 · Ibm · Ibm Cloud Pak For Security
Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Security version 1.3.0.1CP4S Description: The issue allows an authenticated user to obtain sensitive information from the previous session because the session is not properly invalidated after logout. Recommendations: For IB...
IBM Cloud Pak for Security Information Disclosure Vulnerability
IBM Cloud Pak for Security is an integrated security tool that uses a unified interface to provide deep insight into threats in hybrid multi-cloud environments. An information disclosure vulnerability exists in IBM Cloud Pak for Security 1.3.0.1. The vulnerability stems from the product's failure...
IBM Cloud Pak for Security 代码问题漏洞
IBM Cloud Pak for Security is an integrated security tool that uses a unified interface to provide deep insight into threats in hybrid multi-cloud environments. An information disclosure vulnerability exists in IBM Cloud Pak for Security 1.3.0.1. The vulnerability stems from the product's failure...
GaussDB Kernel: Enabling the Auditing of Database Login and Logout
The parameter auditloginlogout specifies whether to audit user login and logout. After this parameter is set to on, users logged in to the database and the time when they logged out are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...
GaussDB Kernel: Enabling the Logging of User Logout
Similar to logconnections, a record containing a session duration is added to the server log at the end of the session. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
openGauss: Enabling the Auditing of Database Login and Logout
The parameter auditloginlogout specifies whether to audit user login and logout. After this parameter is set to on, users logged in to the database and the time when they logged out are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...
openGauss: Enabling the Logging of User Logout
Similar to logconnections, a record containing a session duration is added to the server log at the end of the session. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Microweber Session Expires After Logout Vulnerability
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. Microweber has a security vulnerability. No details of the vulnerability are provided at...
CVE-2020-23136
Microweber v1.1.18 is affected by no session expiry after log-out...
PT-2020-15544
Name of the Vulnerable Software and Affected Versions Microweber version 1.1.18 Description The issue concerns a problem where there is no session expiry after a user logs out. This could potentially allow unauthorized access to a user's session after they have logged out. Recommendations For...
Immuta Session Mismanagement Vulnerability
Immuta is a data organizing platform for data analysis from Immuta. A session mismanagement vulnerability exists in Immuta version v2.8.2, which causes logging out without undoing the user's session. No details of the vulnerability are provided at this time...
