Lucene search
+L

6 matches found

NVD
NVD
•added 2026/07/14 11:16 a.m.•25 views

CVE-2026-15389

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

8.7CVSS0.00441EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/14 10:10 a.m.•13 views

CVE-2026-15389

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

8.7CVSS6AI score0.00441EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/14 10:10 a.m.•12 views

CVE-2026-15389 Inadequate access control in Sesame Time session management

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

8.7CVSS5.7AI score0.00441EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/14 10:10 a.m.•56 views

CVE-2026-15389 Inadequate access control in Sesame Time session management

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

8.7CVSS0.00441EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•19 views

PT-2026-58005

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

8.7CVSS6AI score0.00441EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•5 views

CVE-2026-15389: Authorization Bypass Through User-Controlled Key

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

8.7CVSS5.6AI score0.00441EPSS
SaveExploits0References2
Rows per page
Query Builder