96 matches found
Condeon CMS Information Disclosure
The vulnerability of the Condeon CMS system relates to the storage of confidential information in open text within the memory dump file. Exploiting this vulnerability could allow a malicious actor to intercept sessions and gain access to the user account...
Condeon CMS Session Interception
The vulnerability of the Condeon CMS system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to intercept sessions and gain access to the user account...
UMI CMS Session Interception
The vulnerability of the UMI CMS content management system is related to the lack of measures taken to protect the website’s structure. Operating the system may allow a malicious actor, operating remotely, to intercept the administrator’s session by performing XSS attacks using a specially crafte...
IBM OpenPages Session Interception
The vulnerability of the IBM OpenPages and IBM OpenPages with Watson web interfaces relates to improper session management. Exploiting this vulnerability can allow a malicious actor to intercept a user’s session...
SIMATIC PCS neo Process Management Session Interception
The vulnerability of the SIMATIC PCS neo technology process management web system is related to incorrect session duration. Exploiting this vulnerability could allow an attacker to intercept the user’s session...
CVE-2024-45101
A privilege escalation vulnerability was discovered when Single Sign On SSO is enabled that could allow an attacker to intercept a valid, authenticated LXCA user’s XCC session if they can convince the user to click on a specially crafted URL...
OData Protocol Cache Poisoning Session Interception
The vulnerability of the OData protocol implementation in SAP Fiori for SAP ERP business application development platforms is related to deficiencies in handling HTTP header requests. Exploiting this vulnerability allows a malicious actor to perform a cache poisoning attack or intercept sessions ...
Drupal TFA Session Interception
The vulnerability of the Two-factor Authentication TFA module in Drupal CMS systems is related to improper session management. Exploiting this vulnerability could allow a malicious actor to intercept a user’s session...
Drupal TFA Session Interception
The vulnerability of the Two-factor Authentication TFA module in Drupal CMS systems is related to improper session management. Exploiting this vulnerability could allow a malicious actor to intercept a user’s session...
Symantec Privileged Access Management Inter-site Request Manipulation
The vulnerability of Symantec’s Privileged Access Management tool is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to intercept user sessions remotely...
ASPECT Enterprise Session Management
The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to improper session management. Exploiting this vulnerability can allow an attacker to intercept a user’s session and increase their privileges...
Hitachi Energy MicroSCADA X SYS600 Session Interception
The vulnerability of the software used in Hitachi Energy’s equipment monitoring and control system, MicroSCADA X SYS600, involves bypassing the authentication process. Exploiting this vulnerability allows a malicious actor to intercept an already established session...
FortiOS SSL VPN RCE
The vulnerability of the SSL VPN remote access technology for FortiOS operating systems relates to the interception of user sessions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands remotely...
NGINX OpenID Connect Session Management
The vulnerability of the authentication module through the OpenID Connect protocol in NGINX web servers is related to improper session management. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the application by intercepting sessions...
Advantech ADAM-5630 Session Interception
The vulnerability of the microprogrammed logic controller PLC Advantech ADAM-5630 software is related to the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to intercept the user’s session remotely...
Lenovo XClarity Administrator security vulnerability
Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo China. The product is capable of providing agentless hardware management for servers, storage, network switches, and more. A security vulnerability exists in Lenovo XClarity Administrator, which stems fro...
Swift CocoaPods Session Interception
The vulnerability of the dependency manager for Swift and Objective-C CocoaPods relates to the provision of data elements during an erroneous session. Exploiting this vulnerability can allow a remote attacker to intercept the user’s session and take control of their CocoaPods trunk account...
CVE-2024-41684 Cookie Without Secure Flag Set Vulnerability
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an HTTP session on the vulnerable system...
IBM Datacap Navigator XSS
The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves shortcomings in the processing of HTTP header requests. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks, cache poisoning attacks, or...
