PT-2023-12338

Name of the Vulnerable Software and Affected Versions Rapid7 InsightVM affected versions not specified Description The issue arises from insufficient session expiration when an administrator makes a security-relevant edit to an existing, logged-on user. For instance, if a user's password is chang...

CVE-2019-5638 Rapid7 Nexpose Insufficient Session Management

Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user...