7431 matches found
Insufficient Session Expiration in snipe/snipe-it
Session Fixation in GitHub repository snipe/snipe-it prior to version 6.0.10. The session is not invalidated after a password change...
CVE-2022-2997
Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...
CVE-2022-2997
Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...
Session fixation
Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...
CVE-2022-2997
CVE-2022-2997 affects the Snipe-IT project (snipe/snipe-it) prior to 6.0.10. Root cause: a session-fixation issue where the session is not invalidated after a password change. Impact: could enable unauthorized access to user accounts if exploited. Remediation: upgrade to version 6.0.10 or later; ...
CVE-2022-2997 Session Fixation in snipe/snipe-it
Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...
CVE-2022-2997 Session Fixation in snipe/snipe-it
Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...
Snipe-IT 授权问题漏洞
Session is a new type of encrypted private messenger open-sourced by Oxen. An authorization issue vulnerability exists in Snipe-IT versions prior to 6.0.10, which stems from the fact that sessions do not expire after a password change...
PT-2022-19934 · Snipe · Snipe-It
Name of the Vulnerable Software and Affected Versions: snipe/snipe-it versions prior to 6.0.10 Description: The issue concerns a session fixation problem where the session is not invalidated after a password change. This could potentially allow unauthorized access to user accounts. Recommendation...
6 reasons MSPs need a patch management platform
Weve all heard the stories: Organizations getting breached like there's no tomorrow thanks to threat actors exploiting unpatched vulnerabilities. Likewise, weve also all heard the familiar refrain: Patch regularly! But for many businesses--including the Managed Service Providers MSPs that serve...
Session Fixation
Description The session is not invalidated after a password change. Proof of Concept Open Snipe-IT in the browser and login. Do the same in a private window such that there are two sessions. Change the password in one of the two sessions and observe that the second session is not invalidated...
Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools
This month, Microsoft has been recognized by Gartner® as a Leader in the 2022 Magic Quadrant for Unified Endpoint Management UEM Tools. This blog post outlines the “so what” for IT leaders, and why we believe this Gartner analysis deserves your focus right now. As you see in the Magic Quadrant in...
Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools
This month, Microsoft has been recognized by Gartner® as a Leader in the 2022 Magic Quadrant for Unified Endpoint Management UEM Tools. This blog post outlines the “so what” for IT leaders, and why we believe this Gartner analysis deserves your focus right now. As you see in the Magic Quadrant in...
jeremyreiss.fr Cross Site Scripting vulnerability OBB-2856889
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
it-schulbedarf.de Cross Site Scripting vulnerability OBB-2855437
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in odash.fareach (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dbcf4c716b224cdf277a7fe5185a712412535c4cf2ad128410c80473a9a5d40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gtarc-fs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32db4819ba93a8b0921f47e964c027a2b2059145afd483654479bf0de571187c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fasclck (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 660c53cfb85a6a700bd046082a978aaf7483745fd4c9f96fcbaa21db536c0122 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in miem (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5066bc50b44dab03bb5e2e8d15f5c9a251d36a778fefebcf177d37a4fb2bc541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ihghland (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f868045d687d41657cb8b50d7465579e20db06a4071f45d1b6ffe7c3cc183b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...