2 matches found
EEF-CVE-2025-4754 Missing Session Revocation on Logout in ash_authentication_phoenix
Summary Insufficient Session Expiration vulnerability in ash-project ash\authentication\phoenix allows Session Hijacking. This vulnerability is associated with program files lib/ash\authentication\phoenix/controller.ex. This issue affects ash\authentication\phoenix until 2.10.0...
2.3CVSS6.1AI score0.00402EPSS
SaveExploits0References5
IBM PowerSC 授权问题漏洞
IBM PowerSC is an International Business Machines IBM security and compliance solution for IBM Power Systems servers. IBM PowerSC suffers from a session fixation vulnerability that stems from the failure to provide logout functionality, which could be exploited by an attacker to gain access to...
6.3CVSS6.8AI score0.00285EPSS
SaveExploits0References3
20