28 matches found
Jira - Insufficient Session Validation Web Vulnerability
Document Title: =============== Jira - Insufficient Session Validation Web Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1970 Video: https://www.youtube.com/watch?v=fCN5EaPiDrk Release Date: ============= 2018-07-23 Vulnerability Laboratory ID VL-ID:...
Code injection
Red Hat CloudForms 2 Management Engine CFME allows remote attackers to conduct session tampering attacks by leveraging use of a static secrettoken.rb secret...
CVE-2013-2049
Red Hat CloudForms 2 Management Engine CFME allows remote attackers to conduct session tampering attacks by leveraging use of a static secrettoken.rb secret...
CVE-2013-2049
CFME/Red Hat CloudForms 2 Management Engine is affected by a vulnerability caused by a static secret_token.rb secret, enabling remote attackers to tamper sessions. Based on provided sources, the impact is session integrity (high for CVSS3) with network access and no authentication; CVSS2/3 base s...
CVE-2013-2049
Red Hat CloudForms 2 Management Engine CFME allows remote attackers to conduct session tampering attacks by leveraging use of a static secrettoken.rb secret...
2: static secret_token.rb value
Red Hat CloudForms 2 Management Engine CFME allows remote attackers to conduct session tampering attacks by leveraging use of a static secrettoken.rb secret...
Apache Struts 2.0.92.1.8 - Session Tampering Security Bypass
Apache Struts 2.0.92.1.8 - Session Tampering Security Bypass source: https://www.securityfocus.com/bid/50940/info Apache Struts is prone to a security-bypass vulnerability that allows session tampering. Successful attacks will allow attackers to bypass security restrictions and gain unauthorized...
Apache Struts 2.0.9/2.1.8 - Session Tampering Security Bypass
source: https://www.securityfocus.com/bid/50940/info Apache Struts is prone to a security-bypass vulnerability that allows session tampering. Successful attacks will allow attackers to bypass security restrictions and gain unauthorized access. Apache Struts versions 2.0.9 and 2.1.8.1 are...