CVE-2017-14007

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing an attacker to reuse an old session for authorization...

Authorization

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing an attacker to reuse an old session for authorization...

CVE-2017-14007

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing an attacker to reuse an old session for authorization...

CVE-2017-14007

CVE-2017-14007 affects the ProMinent MultiFLEX M10a Controller web interface. The issue is Insufficient Session Expiration: a user’s session remains usable beyond the last activity, allowing an attacker to reuse an old session for authorization. Public sources (NVD) document the vulnerability wit...

CVE-2017-14007: Insufficient Session Expiration

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing an attacker to reuse an old session for authorization...

PT-2017-13197

Name of the Vulnerable Software and Affected Versions ProMinent MultiFLEX M10a Controller affected versions not specified Description An issue with insufficient session expiration was found in the web interface, allowing an attacker to reuse an old session for authorization because the user's...

CVE-2017-12867: Insufficient Session Expiration

The SimpleSAMLAuthTimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset...

CVE-2017-11667: Insufficient Session Expiration

OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session...

Microsoft Office 365 Enterprise E3 Insufficient Session Expiration Vulnerability

Microsoft Office 365 Enterprise E3 suffers from an insufficient session expiration vulnerability. Product: Office 365 Sharepoint Manufacturer: Microsoft Affected Versions: ? Tested Versions: Office 365 Enterprise E3 version from February 2017 Vulnerability Type: Insufficient Session Expiration...

CVE-2017-3215: Insufficient Session Expiration

The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, in combination with a userid can be used to perform user actions...

Uber: Session not expired When logout [partners.uber.com]

Hi, Summary ========= partners.uber.com website is not expiring the user's session immediately after logout. when user logout, the session not expired, and still can send request and the server respond response with OKAY Steps to Reproduce: - Log into the website - partners.uber.com - Capture any...

CVE-2016-8712: Insufficient Session Expiration

An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds...

CVE-2016-5069: Insufficient Session Expiration

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...

CVE-2016-6040

IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced...

CVE-2016-6040

IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced...

CVE-2016-6043

Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced...

Design/Logic Flaw

IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced...

Design/Logic Flaw

Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced...

CVE-2016-6043

Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced...

CVE-2016-6040

The CVE-2016-6040 issue affects IBM Jazz Foundation within IBM Jazz-based CLM/Rational products. An authenticated user could take over a previously logged-in user because session expiration is not enforced. Affected products include Rational CLM 4.0–6.0.2, Rational Team Concert, Rational Quality ...