Lucene search
+L

69 matches found

Vulnrichment
Vulnrichment
•added 2023/08/01 12:00 a.m.•20 views

CVE-2023-38357

Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions...

6.7AI score0.05346EPSS
SaveExploits4References3
Cvelist
Cvelist
•added 2023/08/01 12:00 a.m.•64 views

CVE-2023-38357

Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions...

5.5AI score0.05346EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/01 12:00 a.m.•4 views

CVE-2023-38357: Insufficient Entropy

Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions...

5.3CVSS6AI score0.05346EPSS
SaveExploits4References2
CVE
CVE
•added 2023/08/01 12:00 a.m.•100 views

CVE-2023-38357

CVE-2023-38357 affects RWS WorldServer up to version 11.7.3, where session tokens have low entropy and can be enumerated, potentially granting unauthorized access to user sessions. Affected component is the session handling/token generation. The exploitation involves token enumeration leading to ...

5.3CVSS5.1AI score0.05346EPSS
SaveExploits4References3Affected Software1
zdt
zdt
•added 2023/07/21 12:00 a.m.•256 views

RWS WorldServer 11.7.3 - Session Token Enumeration

Exploit Title: RWS WorldServer 11.7.3 - Session Token Enumeration Session tokens in RWS WorldServer have a low entropy and can be enumerated, leading to unauthorised access to user sessions. Details ======= Product: WorldServer Affected Versions: 11.7.3 and earlier versions Fixed Version: 11.8.0...

7.1AI score0.05346EPSS
SaveExploits4
CNNVD
CNNVD
•added 2023/07/20 12:00 a.m.•34 views

RWS WorldServer 安全特征问题漏洞

RWS WorldServer is a flexible, enterprise-class translation management system from RWS UK. A security vulnerability exists in RWS WorldServer version 11.7.3 and earlier, which stems from the presence of a session token enumeration issue...

5.3CVSS5.7AI score0.05346EPSS
SaveExploits4References5
Exploit DB
Exploit DB
•added 2023/07/20 12:00 a.m.•348 views

RWS WorldServer 11.7.3 - Session Token Enumeration

Exploit Title: RWS WorldServer 11.7.3 - Session Token Enumeration Session tokens in RWS WorldServer have a low entropy and can be enumerated, leading to unauthorised access to user sessions. Details ======= Product: WorldServer Affected Versions: 11.7.3 and earlier versions Fixed Version: 11.8.0...

5.3CVSS5.6AI score0.05346EPSS
SaveExploits4
Positive Technologies
Positive Technologies
•added 2023/07/19 12:00 a.m.•14 views

PT-2023-26384 · Unknown · Rws Worldserver

Name of the Vulnerable Software and Affected Versions: RWS WorldServer versions 11.7.3 and earlier Description: Session tokens in RWS WorldServer have a low entropy and can be enumerated, leading to unauthorized access to user sessions. Recommendations: For RWS WorldServer versions 11.7.3 and...

5.3CVSS5AI score0.05346EPSS
SaveExploits4References9
Packet Storm
Packet Storm
•added 2023/07/19 12:00 a.m.•284 views

RWS WorldServer 11.7.3 Session Token Enumeration

Advisory: Session Token Enumeration in RWS WorldServer Session tokens in RWS WorldServer have a low entropy and can be enumerated, leading to unauthorised access to user sessions. Details ======= Product: WorldServer Affected Versions: 11.7.3 and earlier versions Fixed Version: 11.8.0 Vulnerabili...

7.1AI score0.05346EPSS
SaveExploits4
Rows per page
Query Builder