CVE-2018-7675

NetIQ Sentinel prior to 8.1.x suffers a session timeout/authentication issue: when a user idle-logs and another user logs in, the new session may be granted but the previous screen and related events/configuration information can be viewed. This indicates an information disclosure risk tied to th...

CVE-2018-7675 Potential Information Disclosure in Sentinel

In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If...