CVE-2018-1340

Removed by vendor...

CVE-2018-1340

CVE-2018-1340 affects Apache Guacamole prior to 1.0.0 where the client-side session token cookie lacked the secure flag, enabling interception on plaintext HTTP. The connected Fedora advisories confirm updates to 1.0.0 address CVE-2018-1340 (and related RDP/guacd issues in older releases). CVSSv3...

CVE-2018-1340: Missing Encryption of Sensitive Data

Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token. This cookie lacked the "secure" flag, which could allow an attacker eavesdropping on the network to intercept the user's session token if unencrypted HTTP requests are made to the same domain...

CVE-2018-1962

CVE-2018-1962 affects IBM Security Identity Manager Virtual Appliance versions 7.0.1–7.0.1.10. Root cause: failure to invalidate session tokens on logout, enabling local attackers to log into a closed browser session. Reported impact is limited to local access scenarios with session termination b...

Apache Guacamole Information Disclosure Vulnerability

Apache Guacamole is a clientless remote desktop gateway from the American Apache Apache Software Foundation. The product supports protocols such as VNC, RDP and SSH. A security vulnerability exists in Apache Guacamole versions 0.9.4 through 0.9.14, which stems from the program's failure to use th...

CVE-2018-19718

Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposure of the privileges granted to a session...

CVE-2018-19718

Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposure of the privileges granted to a session...

CVE-2018-19718

Adobe Connect 9.8.1 and earlier are affected by CVE-2018-19718, a session token exposure vulnerability that could lead to exposure of the privileges granted to a session. Affected product: Adobe Connect (versions 9.8.1 and earlier). Root cause: session token exposure. Impact: potential leakage of...

CVE-2018-19718: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposure of the privileges granted to a session...

Adobe Connect <= 9.8.1 Exposure Of The Privileges Granted To A Session Vulnerability (APSB19-05)

The version of Adobe Connect installed on the remote host is prior to 10.1.0. It is, therefore, affected by a vulnerability as referenced in the apsb19-05 advisory. - Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposu...

Adobe Patches Important Bugs in Connect and Digital Edition

Adobe released patches for two bugs rated “important” in its Adobe Digital Edition and Adobe Connect products. The two important vulnerabilities, patched Tuesday, include an information disclosure bug in Adobe’s ebook reader software program, Digital Edition; as well as a session token exposure b...

APSB19-05 Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves an important session token exposure vulnerability...

Cross-Site Scripting (XSS)

hsweb-system-workflow-local is vulnerable to cross-site scripting XSS. A lack of validation on the type parameter in FlowableModelManagerController.java allows a remote attacker to inject arbitrary Javascript into a victim's browser to steal session token or perform unwanted actions on behalf of...

Cross-Site Scripting (XSS)

validator is vulnerable to cross-site scripting. A remote attacker is able to bypass XSS filters via nested forbidden strings to inject arbitrary Javascript into a victim’s browser to steal session tokens or perform unwanted actions on behalf of the user...

Nuuo Central Management Server User Session Token Bruteforce

Nuuo Central Management Server below version 2.4 has a flaw where it sends the heap address of the user object instead of a real session number when a user logs in. This can be used to reduce the keyspace for the session number from 10 million to 1.2 million, and with a bit of analysis it can be...

CVE-2018-15382: External Control of Critical State Data

A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens. The vulnerability is due to a static signing key that is present in all Cisco HyperFlex systems. An attacker could exploit this vulnerability by accessing the stat...

CVE-2018-9082

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the password changing functionality available to authenticated users does not require the user's current password to set a new one. As a result, attackers with access to the user's session tokens can change their...

CVE-2018-3914

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 2000 bytes. An attacker ca...

PT-2018-16306 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: A stack-based buffer overflow issue exists in the video-core HTTP server due to the retrieval of database fields. The strcpy call overflows a destination buffer of 2000 bytes. A...

Samsung SmartThings Hub STH-ETH-250 video-core HTTP server buffer overflow vulnerability

Samsung SmartThings Hub STH-ETH-250 is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the credential processor of the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 using...