CVE-2022-2064 Insufficient Session Expiration in nocodb/nocodb

Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+...

CVE-2022-2064 Insufficient Session Expiration in nocodb/nocodb

Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+...

PT-2022-14832

Name of the Vulnerable Software and Affected Versions nocodb/nocodb versions prior to 0.91.9 Description The issue is related to insufficient session expiration in the GitHub repository nocodb/nocodb. Recommendations For versions prior to 0.91.9, update to version 0.91.9 or later to resolve the...

NocoDB 代码问题漏洞

NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into a smart spreadsheet. A security vulnerability exists in NocoDB versions prior to 0.91.7+ that stems from insufficient session expiration...

CVE-2022-2064: Insufficient Session Expiration

Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+...

Insufficient Session Expiration

Description The application NocoDB failed to invalidate the session after changing the password and In this scenario changing the password doesn't destroy the other sessions which are logged in with old passwords. Proof of Concept Login same account in two different browsers. Try to change the...

CVE-2022-30277

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information ePHI, protected health information PHI and...

CVE-2022-30277

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information ePHI, protected health information PHI and...

Session fixation

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information ePHI, protected health information PHI and...

CVE-2022-30277 BD Synapsys™ – Insufficient Session Expiration

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information ePHI, protected health information PHI and...

CVE-2022-30277

BD Synapsys, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability (CWE-613) that could allow a threat actor to access, modify, or delete sensitive data (ePHI/PHI/PII). Exploitation is not remotely exploitable per available documents. CVSS v3 base score: 5.7 ...

CVE-2022-30277: Insufficient Session Expiration

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information ePHI, protected health information PHI and...

CVE-2022-30277

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information ePHI, protected health information PHI and...

PT-2022-4508

Name of the Vulnerable Software and Affected Versions BD Synapsys versions 4.20 through 4.30 Description The issue is related to an insufficient session expiration, which could allow threat actors to access, modify, or delete sensitive information, including electronic protected health informatio...

BD Synapsys 代码问题漏洞

BD Synapsys is a software application from Biddy Medical BD that provides data management and workflow functionality in clinical diagnostic activities in laboratories. A code issue vulnerability exists in BD Synapsys versions 4.20, 4.20 SR1, and 4.30 that stems from insufficient session expiratio...

BD Synapsys

1. EXECUTIVE SUMMARY CVSS v3 5.7 ATTENTION: Low attack complexity Vendor: Becton, Dickinson and Company BD Equipment: Synapsys Vulnerability: Insufficient Session Expiration 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete...

Camaleon CMS Insufficient Session Expiration vulnerability

Camaleon CMS 0.1.7 through 2.6.0 doesn’t terminate the active session of the users, even after the admin changes the user’s password. A user that was already logged in, will still have access to the application even after the password was changed. Resolved in commit...

GHSA-438X-2P9V-G8H9 Camaleon CMS Insufficient Session Expiration vulnerability

Camaleon CMS 0.1.7 through 2.6.0 doesn’t terminate the active session of the users, even after the admin changes the user’s password. A user that was already logged in, will still have access to the application even after the password was changed. Resolved in commit...

Magento Insufficient Session Expiration

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier do not adequately invalidate user sessions. Successful exploitation could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation...

GHSA-4H3P-63X6-VWG2 Magento Insufficient Session Expiration

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier do not adequately invalidate user sessions. Successful exploitation could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation...