CVE-2023-3394 Session Fixation in fossbilling/fossbilling

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3394 Session Fixation in fossbilling/fossbilling

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3394 Session Fixation in fossbilling/fossbilling

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3394

The CVE-2023-3394 entry describes a Session Fixation flaw in FossBilling (fossbilling/fossbilling) prior to version 0.5.1. The root cause is failing to regenerate the session identifier (PHPSESSID) after user authentication, allowing an attacker to fix a session before login and potentially acces...

fossbilling 授权问题漏洞

fossbilling is a free open source solution for efficient billing and customer management. An authorization issue vulnerability exists in versions prior to fossbilling 0.5.1 that stems from the presence of session fixing...

Session Fixation

froxlor/froxlor is vulnerable to Session Fixation. The vulnerability exists because it does not properly regenerate session ids, which allows an attacker to login on behalf of a user if they have access to an old session cookie...

Session fixation

Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operatio...

Session Fixation Vulnerability

Description The application does not generate a new PHPSESSID cookie after the user authenticates successfully. A malicious user is able to create a new session cookie value and injects it to a victim pre-authenticaiton. After the victim logs in, the injected cookie becomes valid, giving the...

SUSE CVE-2023-3192

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

Siemens SICAM Q200 Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Session fixation

Atlas Copco Power Focus 6000 web server uses a small amount of session ID numbers. An attacker could enter a session ID number to retrieve data for an active user’s session...

GHSA-JR66-9GHF-6GP3 Froxlor Session Fixation vulnerability

Versions of froxlor/froxlor prior to release 2.1.0 did not regenerate session ids appropriately which may result in session fixation...

Froxlor Session Fixation vulnerability

Versions of froxlor/froxlor prior to release 2.1.0 did not regenerate session ids appropriately which may result in session fixation...

CVE-2023-3192

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-3192

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

Session fixation

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-3192 Session Fixation in froxlor/froxlor

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

PT-2023-23520 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor/froxlor versions prior to 2.1.0 Description: The issue is related to session fixation, where session ids are not regenerated appropriately. This may result in session fixation. Recommendations: For versions prior to 2.1.0, update to...

CVE-2023-3192 Session Fixation in froxlor/froxlor

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-3192

CVE-2023-3192 affects froxlor/froxlor versions prior to 2.1.0. The root cause is failure to regenerate session IDs, which may enable session fixation . Documents consistently describe this issue and its impact as an authorization/session management risk. The primary remediation is to upgrade to v...