1511 matches found
UBUNTU-CVE-2014-5253
OpenStack Identity Keystone 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain...
Authentication flaw
The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication via unspecified vectors...
CVE-2014-3944
The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication via unspecified vectors...
Improper Session Invalidation
More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001/...
Multiple Vulnerabilities in TYPO3 CMS
It has been discovered that TYPO3 CMS is vulnerable to Cross-Site Scripting, Insecure Unserialize, Improper Session Invalidation, Authentication Bypass, Information Disclosure and Host Spoofing. Component Type: TYPO3 CMS Vulnerability Types: Cross-Site Scripting, Insecure Unserialize, Improper...
DEBIAN-CVE-2014-2237
The memcache token backend in OpenStack Identity Keystone 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list, which prevents the token from being...
CVE-2012-5158
Puppet Enterprise PE before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via unspecified vectors...
Design/Logic Flaw
Puppet Enterprise PE before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via unspecified vectors...
CVE-2012-5158
Puppet Enterprise PE before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via unspecified vectors...
CVE-2012-5158
Removed by vendor...
Moderate: Red Hat Security Advisory: openstack-keystone security and bug fix update
Updated openstack-keystone packages that fix one security issue and several bugs are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Django Vulnerability Could Allow Attackers Access to Cookies
A security vulnerability in the web framework Django could make it easier for an attacker to steal a user’s cookie and log into their website even after they’ve logged out. The session invalidation vulnerability was discovered by G.S. McNamara, the same researcher who dug up a similar vulnerabili...
CVE-2013-4762
Removed by vendor...
Ubuntu Update for keystone USN-1830-1
Check for the Version of keystone OpenVAS Vulnerability Test $Id: gbubuntuUSN18301.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for keystone USN-1830-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Design/Logic Flaw
The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a sessio...
[USN-1641-1] OpenStack Keystone vulnerabilities
========================================================================== Ubuntu Security Notice USN-1641-1 November 28, 2012 keystone vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives:...
OpenStack-Keystone: role revocation token issues
OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles...
DEBIAN-CVE-2012-4413
OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles...
PT-2012-5384
Name of the Vulnerable Software and Affected Versions OpenStack Keystone versions prior to 2012.1.3 Description The issue allows remote authenticated users to retain the privileges of revoked roles because existing tokens are not invalidated when roles are granted or revoked. Recommendations For...
