93 matches found
Apple Music TLS SSL Session Interception
The vulnerability of the TLS and SSL protocols implemented by Apple Music for the Android operating system is related to improper session management. Exploiting this vulnerability can allow a malicious actor to intercept a user’s session...
Nextcloud Server Session Expiration
The vulnerability of cloud software for creating and using Nextcloud Server storage solutions is related to incorrect session duration. Exploiting this vulnerability can allow attackers to intercept user sessions...
Graylog Session Interception
The vulnerability of the Graylog log collection, analysis, and storage software lies in the incorrect duration of the session. Exploiting this vulnerability allows a remote attacker to intercept the user’s session...
libspdm Authentication Bypass
The vulnerability of the libspdm library is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to intercept a user’s session remotely...
QMS.Mobile Module Session Interception
The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers, QMS Automotive, is related to incorrect session duration. Exploiting this vulnerability could allow an attacker to intercept the active session...
ksmbd module interception
The vulnerability of the ksmbd module in Linux operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to intercept an ongoing session...
Schneider Electric Ritto Wiser Door sensor Information Disclosure
The vulnerability of Schneider Electric Ritto Wiser Door door sensors’ microprogramming software is related to the disclosure of information during data exchange. Exploiting this vulnerability could allow a intruder to intercept a session...
SAP NetWeaver Integration Platform Session Interception
The vulnerability of the Pmitest server of the SAP NetWeaver software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of administrators or...
SAP NetWeaver Integration Platform Session Interception
The vulnerability of the Ecatt server, a software integration platform for SAP NetWeaver, is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of...
SAP Business Objects Session Interception
The vulnerability of the SAP Business Objects decision support system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to intercept administrator or user sessions on the web resources, using specially crafted POST/GET...
SAP NetWeaver Integration Platform Session Interception
The vulnerability of the ProxyServer server of the SAP NetWeaver software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of administrators ...
SAP NetWeaver Integration Platform Session Interception
The vulnerability of the MDT software integration platform for SAP NetWeaver is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of an administrator or user of the w...
PT-2021-3543
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue is related to the ProxyServer of the SAP NetWeaver software integration platform, where the structure of web pages is not properly protected. This can be exploited by a remote...
PT-2021-3545
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue is related to the lack of protection for the web page structure in the MDT server of the SAP NetWeaver software integration platform. Exploitation of this issue could allow a...
PT-2021-3544
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue is related to the lack of protection for the web page structure in the Pmitest server of the SAP NetWeaver software integration platform. This can be exploited by a remote...
Junos Web Session Interception
The vulnerability of the Junos operating system exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to capture the HTTP/HTTPS session of the target user and perform administrative actions...
Design/Logic Flaw
HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes versions 10.0.1 FP6 and 11.0.1 FP2 and later...
Hcl Technologies Inotes: Information leakage vulnerability
HCL iNotes is a software from HCL India that allows management of IBM Domino mail, scheduling of errands, and other office activity management. HCL iNotes suffers from a sensitive cookie disclosure vulnerability. An attacker can exploit this vulnerability to capture cookies by intercepting the...
SAP BusinessObjects Business Intelligence BI Workspace Privilege Escalation
The vulnerability of the BI Workspace module of the SAP BusinessObjects Business Intelligence platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to elevate their privileges by intercepting sessions or disclose...
TrueConf Server Session Termination
The vulnerability of the TrueConf Server software is related to the absence of a mechanism to terminate the user’s access session. Exploiting this vulnerability could allow a malicious actor to intercept the user’s session...