CVE-2022-3362 Insufficient Session Expiration in ikus060/rdiffweb

Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...

CVE-2022-3362

Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...

CVE-2022-3362

CVE-2022-3362 affects ikus060/rdiffweb prior to 2.5.0, due to insufficient session expiration. This is documented as a high-severity issue (CVE base score 9.8, critical) with network access required and no user interaction. The vulnerability arises from inadequate session expiration handling in t...

PT-2022-21792

Name of the Vulnerable Software and Affected Versions rdiffweb versions prior to 2.5.0 Description The issue is related to insufficient session expiration. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

Rdiffweb 代码问题漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. A code issue vulnerability exists in rdiffweb versions prior to 2.5.0, where the source session expires insufficiently...

CVE-2022-3362 Insufficient Session Expiration in ikus060/rdiffweb

Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...

CVE-2022-3362 Insufficient Session Expiration in ikus060/rdiffweb

Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...

HashiCorp Nomad vulnerable to Insufficient Session Expiration

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2...

GHSA-9FMC-5FQ4-5JWH HashiCorp Nomad vulnerable to Insufficient Session Expiration

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2...

CVE-2022-3867: Insufficient Session Expiration

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2...

CVE-2022-39234: Insufficient Session Expiration

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Deleted/deactivated user could continue to use their account as long as its cookie is valid. This iss...

CVE-2022-40230: Insufficient Session Expiration

"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532."...

CVE-2022-2782: Insufficient Session Expiration

In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters...

CVE-2021-46279

Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...

Session fixation

Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...

CVE-2021-46279: Session Fixation

Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...

PT-2022-12629 · Lanner · Iac-Ast2500A

Name of the Vulnerable Software and Affected Versions: Lanner Inc IAC-AST2500A version 1.10.0 Description: Session fixation and insufficient session expiration vulnerabilities allow an attacker to perform session hijacking attacks against users. Recommendations: For Lanner Inc IAC-AST2500A versio...

CVE-2021-46279

CVE-2021-46279 affects Lanner Inc IAC-AST2500A firmware 1.10.0. Reported vulnerabilities are session fixation and insufficient session expiration that enable session hijacking. Public details note the issue is tied to Lanner IAC-AST2500A and propose mitigation such as disabling the session manage...

CVE-2022-41542: Insufficient Session Expiration

devhub 0.102.0 was discovered to contain a broken session control...

CVE-2022-41672: Insufficient Session Expiration

In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API...