CVE-2022-31689

VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token...

CVE-2022-31689

VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token...

Siemens POWER METER SICAM Q100 Session Fixed Vulnerability

The POWER METER SICAM Q100 is a multifunctional device for detecting, reporting and analyzing measured values and events. A session fixation vulnerability exists in the Siemens POWER METER SICAM Q100, which can be exploited by an attacker to gain access to a user's account via an active session...

CVE-2022-31689

CVE-2022-31689 describes a session fixation flaw in VMware Workspace ONE Assist prior to version 22.10. A malicious actor with a valid session token could authenticate to the application using that token. Public documents confirm affected versions include 21.x and 22.x, with the issue fixed in 22...

Session fixation

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50. Affected devices do not renew the session cookie after login/logout and also accept us...

Siemens POWER METER SICAM 授权问题漏洞

The POWER METER SICAM Q100 is a multifunctional device for detecting, reporting and analyzing measured values and events. A session fixation vulnerability exists in the Siemens POWER METER SICAM Q100, which can be exploited by an attacker to gain access to a user's account via an active session...

PT-2022-5626 · Vmware · Vmware Workspace One Assist

Name of the Vulnerable Software and Affected Versions: VMware Workspace ONE Assist versions prior to 22.10 Description: The issue is related to a session fixation problem, where a malicious actor who obtains a valid session token may be able to authenticate to the application using that token. Th...

VMware Workspace ONE Assist update addresses multiple vulnerabilities.

3a. Authentication Bypass vulnerability CVE-2022-31685 VMware Workspace ONE Assist contains an Authentication Bypass vulnerability. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. 3b. Broken Authentication Method...

Siemens SICAM Q100

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely / low attack complexity Vendor: Siemens Equipment: SICAM Q100 Vulnerabilities: Session Fixation, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to take over the...

CVE-2022-40293

The application was vulnerable to a session fixation that could be used hijack accounts...

CVE-2022-40293

The application was vulnerable to a session fixation that could be used hijack accounts...

Session fixation

The application was vulnerable to a session fixation that could be used hijack accounts...

CVE-2022-40293 Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

The application was vulnerable to a session fixation that could be used hijack accounts...

CVE-2022-40293 Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

The application was vulnerable to a session fixation that could be used hijack accounts...

CVE-2022-40293

CVE-2022-40293 pertains to a session-fixation vulnerability in PHP Point of Sale, LLC’s PHP Point of Sale 19.0. The issue arises in the application’s session management, enabling an attacker to hijack user accounts. CVSS metrics indicate a CRITICAL impact (CVSS 3.1: 9.8) with high confidentiality...

PHP Point of Sale 授权问题漏洞

PHP Point of Sale is an online point of sale system for small retail businesses by PHP Point of Sale, Inc. A security vulnerability exists in PHP Point of Sale LLC version 19.0 that stems from the application's susceptibility to a session fixation that can be used to hijack accounts, which can be...

PT-2022-25329 · Php Point Of Sale Llc +1 · Php Point Of Sale

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The application was vulnerable to a session fixation that could be used to hijack accounts. Recommendations: At the moment, there is no information about a newer version that contai...

Citrix ADC and Citrix Gateway Multiple Vulnerabilities (CTX319135)

The remote Citrix ADC or Citrix Gateway device is version 11.1 before 11.1-65.22, 12.1 before 12.1-62.27 or 13.0 before 13.0-82.45. It is therefore affected by multiple vulnerabilities: - A vulnerability has been discovered in Citrix ADC formerly known as NetScaler ADC and Citrix Gateway formerly...

Oracle Linux 7 : thunderbird (ELSA-2022-6710)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6710 advisory. 102.3.0-3.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 102.3.0-3 - Update to...

CVE-2021-46279

Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...