4022 matches found
Session fixation
Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0...
MOXA NPort IAW5000A-I/O Series Session Fixation (CVE-2020-25198)
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user's cookies. This plugin only works with Tenable.ot. Please vis...
Session fixation
Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions...
Session fixation
Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5...
Security Bulletin: IBM MQ as used by IBM QRadar SIEM contains multiple vulnerabilities
Summary IBM MQ as used by IBM QRadar SIEM contains multiple vulnerabilities. IBM QRadar SIEM has addressed the applicable vulnerabilities. Vulnerability Details CVEID:CVE-2020-4682 DESCRIPTION: IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code ...
GHSA-RWG5-2PV9-633W Jenkins OpenShift Login Plugin session fixation vulnerability
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb1a20 and earlier does not invalidate the existing session on login. This allows attackers to use social engineering techniques to gain administrator access to Jenkins. OpenShift Login Plugin 1.1.0.230.v5d7030bf5432 invalidates the existing session...
Jenkins OpenShift Login Plugin session fixation vulnerability
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb1a20 and earlier does not invalidate the existing session on login. This allows attackers to use social engineering techniques to gain administrator access to Jenkins. OpenShift Login Plugin 1.1.0.230.v5d7030bf5432 invalidates the existing session...
Session fixation
The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS 115...
Session Fixation
graylog2-server is vulnerable to Session Fixation. The vulnerability exists because a node may still have the session cached even when a user has explicitly logged out, which allows the session to still be used for API requests until it has reached its original expiry time...
Jenkins Plugin OpenShift Login 授权问题漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...
Debian dla-3493 : php-symfony - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3493 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3493-1 [email protected]...
[SECURITY] [DLA 3493-1] symfony security update
Debian LTS Advisory DLA-3493-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin July 11, 2023 https://wiki.debian.org/LTS Package : symfony Version : 3.4.22+dfsg-2+deb10u2 CVE ID : CVE-2021-21424 CVE-2022-24894 CVE-2022-24895 Multiple security vulnerabilities were...
Session fixation
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6...
Session fixation
An issue in Ateme Flamingo XL v.3.6.20 and XS v.3.6.5 allows a remote authenticated attacker to execute arbitrary code and cause a denial of service via a the session expiration function...
CVE-2023-3394
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
Session fixation
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
CVE-2023-3394 Session Fixation in fossbilling/fossbilling
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
CVE-2023-3394
The CVE-2023-3394 entry describes a Session Fixation flaw in FossBilling (fossbilling/fossbilling) prior to version 0.5.1. The root cause is failing to regenerate the session identifier (PHPSESSID) after user authentication, allowing an attacker to fix a session before login and potentially acces...
