1548 matches found
CVE-2022-38707 IBM Cognos Command Center information disclosure
IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179...
PT-2023-13637 · Ibm · Ibm Cognos Command Center
Name of the Vulnerable Software and Affected Versions: IBM Cognos Command Center version 10.2.4.1 Description: The issue allows a local attacker to obtain sensitive information due to insufficient session expiration. Recommendations: For IBM Cognos Command Center version 10.2.4.1, consider...
Insufficient Session Expiration
Overview Affected versions of this package are vulnerable to Insufficient Session Expiration such that the token used in the password reset links remains valid even after the password reset and can be used a second time to change the password of the corresponding user. The token expires only 3...
Insufficient Session Expiration
Overview Affected versions of this package are vulnerable to Insufficient Session Expiration such that the token used in the password reset links remains valid even after the password reset and can be used a second time to change the password of the corresponding user. The token expires only 3...
CVE-2023-28003
A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijacked session in PME after the legitimate user has signed out of their account...
Session fixation
A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijacked session in PME after the legitimate user has signed out of their account...
CVE-2023-28003
CVE-2023-28003 corresponds to a CWE-613 Insufficient Session Expiration issue in Schneider Electric EcoStruxure Power Monitoring Expert (PME). The vulnerability allows a hijacked session to persist after the legitimate user signs out, enabling unauthorized access to protected information. Connect...
CVE-2023-28003
A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijacked session in PME after the legitimate user has signed out of their account...
Schneider Electric EcoStruxure Power Monitoring Expert 代码问题漏洞
The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France that is used to perform power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert has a code issue vulnerability that stems from the presence o...
Insufficient Session Expiration
grumpydictator/firefly-iii is vulnerable to Insufficient Session Expiration. The vulnerability exists due to improper session configurations in session.php which allows an authenticated remote attacker to reuse session tokens because they do not expire after log out...
CVE-2023-1788
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
Session fixation
Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...
CVE-2023-1854
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...
Information disclosure
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...
CVE-2023-1854 SourceCodester Online Graduate Tracer System session expiration
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...
CVE-2023-1854 SourceCodester Online Graduate Tracer System session expiration
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...
CVE-2023-1854
CVE-2023-1854 — SourceCodester Online Graduate Tracer System 1.0 : A vulnerability in an unknown function in admin/ leads to session expiration. It can be exploited remotely, and the exploit has been disclosed publicly. Public sources (NVD) rate the impact as high (CVSSv3.1: 9.8) with network acc...
firefly-iii 代码问题漏洞
firefly-iii is a free and open source personal finance manager. A code issue vulnerability exists in versions prior to firefly-iii 6, which stems from the presence of an insufficient session expiration time...