4019 matches found
CVE-2022-22681
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...
Session fixation
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...
CVE-2022-22681
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...
CVE-2022-22681
Synology Photo Station (pre-6.8.16-3506) contains a Session Fixation vulnerability in access control management that can allow remote attackers to bypass security constraints. Affected component: Photo Station; root cause: session fixation. Impact is elevated access by bypassing constraints; expl...
CVE-2022-22681
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...
Session Fixation
passport is vulnerable to session fixation. A remote unauthenticated attacker is able to gain access to guest sessions because when a user logs in or logs out, the session is regenerated instead of being closed...
CVE-2022-25896 Session Fixation
This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed...
Session Fixation
silverstripe/hybridsessions is vulnerable to session fixation. The vulnerability exists because the destroy function of DatabaseStore.php does not properly reset the user session after logging out, allowing an attacker to gain privileges via the client-side cookie...
CVE-2022-24444
Silverstripe silverstripe/framework through 4.10 allows Session Fixation...
CVE-2022-24444
Silverstripe silverstripe/framework through 4.10 allows Session Fixation...
Session fixation
Silverstripe silverstripe/framework through 4.10 allows Session Fixation...
CVE-2022-24444
CVE-2022-24444 affects Silverstripe framework versions 4.10 and earlier. The issue is a session-fixation vulnerability involving the hybridsessions module when the session-manager module is not installed and session IDs are saved to disk; unexpired SessionIDs of logged-out users can still be used...
CVE-2022-24444
Silverstripe silverstripe/framework through 4.10 allows Session Fixation...
CVE-2022-24444
Silverstripe silverstripe/framework through 4.10 allows Session Fixation...
PT-2022-16701 · Silverstripe · Silverstripe/Framework
Name of the Vulnerable Software and Affected Versions: Silverstripe silverstripe/framework versions 4.10 and earlier Description: The issue allows session fixation, where unexpired SessionIDs of logged out users can still be used to make authenticated requests when the hybridsessions module is us...
Session Fixation
typo3/cms is vulnerable to session fixation. The vulnerability exists because the setAuthorizedAndRedirect function of BackendModuleController.php does not properly revoke tokens after the user account was degraded to lower permissions or disabled completely...
Session fixation
Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-27305
Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation...