2 matches found
PT-2026-20391
Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of session invalidation after new logins. The application generates a new 'sessionId' each time a user authenticates, but does not invalidate previously issued session identifiers,...
9.3CVSS5.5AI score0.00367EPSS
SaveExploits0References2
20