CVE-2019-15737

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed improved authentication and session management...

CVE-2019-15737

Technical details are not publicly available in the provided documents. Monitor for updates to clarify affected components, root cause, impact, and remediation.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management relates to session management errors, allowing an attacker to escalate their privileges.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software relates to session management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Cisco NX-OS Software Remote Management Memory Leak Denial of Service Vulnerability (CVE-2019-1965)

According to its self-reported version, Cisco NX-OS Software is affected by vulnerability in the Virtual Shell VSH session management which could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that...

CVE-2019-1965

A vulnerability in the Virtual Shell VSH session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can deplete system memory. When there is no syst...

Design/Logic Flaw

A vulnerability in the Virtual Shell VSH session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can deplete system memory. When there is no syst...

CVE-2019-5638 Rapid7 Nexpose Insufficient Session Management

Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user...

Cisco Data Center Network Manager < 11.1(1) Authentication Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper session...

The vulnerability of the vCloud Director platform, related to improper session management, allows a attacker to intercept deleted sessions.

The vulnerability of the vCloud Director platform vCD is related to improper session management. Exploiting this vulnerability can allow a malicious actor to intercept disconnected sessions remotely...

CVE-2019-5966

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors...

CVE-2019-5966

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors...

Information disclosure

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors...

CVE-2019-5966

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors...

CVE-2019-5966

CVE-2019-5966 affects Joruri Mail 2.1.4 and earlier. The issue is due to improper session management, enabling a remote attacker to impersonate an arbitrary user and alter/disclose information. The Red Hat/NVD entries confirm the impact; affected versions are 2.1.4 and earlier. Remediation advise...

The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to perform arbitrary actions on a vulnerable device with administrator privileges.

The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to session management errors. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device with administrator privileges, using specially crafted...

Omise: Broken Authentication and Session Management Flaw After Change Password and Logout

Summary Usually it's happened that when you change password or sign out from one place or one browser, automatically someone who is open same account will sign out too from another browser. Basically your session destroyed at server side... But in your site, it still alive.. PoC Detail About...

Security Bulletin: IBM Tivoli Netcool Impact Session Management - Session Fixation

Summary IBM Tivoli Netcool Impact did not implement proper Session Management. The attacker can fix the users session and lure the victim to login with the Arbitrary session he created, further results into Session hijacking. Vulnerability Details CVEID: Not Applicable DESCRIPTION: No CVE...

CVE-2019-1619

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper session...

Authentication flaw

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper session...

CVE-2019-1619 Cisco Data Center Network Manager Authentication Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper session...