details-for-CVE-2022-46505

details-for-CVE-2022-46505 Bug di ripresa della sessione in MatrixSSL 1. Descrizione del bug Un problema in MatrixSSL 4.5.1-open e versioni precedenti porta al mancato controllo sicuro del campo SessionID, con conseguente uso improprio di un MasterSecret tutto a zero che può decrittare dati...

CVE-2025-52689 Weak Session ID Check in the OmniAccess Stellar Web Management Interface

Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point...

CVE-2020-24387

An issue was discovered in the yhcreatesession function of yubihsm-shell through 2.0.2. The function does not explicitly check the returned session id from the device. An invalid session id would lead to out-of-bounds read and write operations in the session array. This could be used by an attack...