Debian dla-3487 : fusiondirectory - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3487 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3487-1 [email protected]...

Insufficient Session Expiration

grumpydictator/firefly-iii is vulnerable to Insufficient Session Expiration. The vulnerability exists due to improper session configurations in session.php which allows an authenticated remote attacker to reuse session tokens because they do not expire after log out...

The vulnerability of the EcoStruxure Power Monitoring Expert software lies in its incorrect session duration, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the EcoStruxure Power Monitoring Expert software is related to incorrect session duration settings. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Symfony software platform for developing and managing web applications lies in improper session management, which allows attackers to execute CSRF attacks.

The vulnerability of the Symfony software platform for developing and managing web applications is related to improper session management. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack from a remote location...

Security Bulletin: IBM MQ Appliance is vulnerable to improper session invalidation (CVE-2022-40230)

Summary IBM MQ Appliance has resolved an improper session validation vulnerability. Vulnerability Details CVEID:CVE-2022-40230 DESCRIPTION: IBM MQ Appliance does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. CVSS Base score:...

The vulnerability of the remote access tool for VMware Workspace ONE Assist, related to improper session management, allows a malicious individual to gain unauthorized access to the application.

The vulnerability of the remote access tool for VMware Workspace ONE Assist is related to improper session management. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the application...

DEBIAN-CVE-2022-36179

Fusiondirectory 1.3 suffers from Improper Session Handling...

CVE-2022-36179

Fusiondirectory 1.3 suffers from Improper Session Handling...

CVE-2022-36179

Fusiondirectory 1.3 suffers from Improper Session Handling...

UBUNTU-CVE-2022-36179

Fusiondirectory 1.3 suffers from Improper Session Handling...

Design/Logic Flaw

Fusiondirectory 1.3 suffers from Improper Session Handling...

CVE-2022-36179

CVE-2022-36179 affects Fusiondirectory 1.3 and is due to Improper Session Handling. The connected advisories indicate a vulnerability in Fusiondirectory 1.3 requiring a package update; Mageia MGASA-2023-0352 notes updated fusiondirectory packages fix the issues, and Debian DLA-3487/DLA-3487-1 ref...

CVE-2022-36179

Fusiondirectory 1.3 suffers from Improper Session Handling...

CVE-2022-36179

Fusiondirectory 1.3 suffers from Improper Session Handling...

CVE-2022-36179

Fusiondirectory 1.3 suffers from Improper Session Handling...

PT-2022-23245 · Unknown · Fusiondirectory

Name of the Vulnerable Software and Affected Versions: Fusiondirectory version 1.3 Description: The issue is related to improper session handling. Recommendations: For Fusiondirectory version 1.3, at the moment, there is no information about a newer version that contains a fix for this issue...

Improper Session Management

rdiffweb is vulnerable to Improper Session Management. The vulnerability exists because the library does not invalidate all the session tokens for a user on a password change, resulting in users logged in with the old password to continue being logged in...

CVE-2022-40843

Affected product: Tenda AC1200 V-W15Ev2 (W15Ev2, firmware version V15.11.0.10(1576)). Vulnerability: Improper authorization/improper session management allows bypassing the router login page. This can lead to reading the router’s syslog.log file which contains the MD5 password of the Administrato...

Session fixation

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 inclusive, due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this...

CVE-2022-40630 Improper Session Management Vulnerability in Tacitine Firewall

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 inclusive, due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this...