Session fixation

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request...

CVE-2018-9026

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request...

CVE-2018-9026

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request...

CVE-2018-9026

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request...

CVE-2018-9026

CA Privileged Access Manager 2.x is affected by CVE-2018-9026, a session fixation vulnerability that could allow remote attackers to hijack user sessions via a specially crafted request. The CNVD/NVD entries confirm the affected product version (2.x) and the vulnerability class but do not provide...

Session Fixation

codeigniter/framework is vulnerable to session fixation attacks. The vulnerability exists due to the assumption that session.usestrictmode which was the default behavior of PHP 5.x...

CVE-2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

Session fixation

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

CVE-2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

CVE-2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.usestrictmode in the Session Library was mishandled...

CVE-2018-12071

Summary (CVE-2018-12071) : CodeIgniter before 3.1.9 is affected by a session fixation vulnerability caused by mishandling of the PHP directive session.use_strict_mode in the Session Library. Multiple connected sources describe this issue consistently (CodeIgniter’s prior to 3.1.9 handling, and ad...

Session fixation

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firmware...

Session fixation

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via a virtualization attack...

Security Bulletin: HTTP Header Injection Vulnerability Addressed in Asset and Service Management (CVE-2014-3026)

Summary Header injection in HTTP responses can allow for HTTP response splitting, Session fixation via the Set-Cookie header, cross-site scripting XSS, and malicious redirects attacks via the location header in Maximo Asset Mgmt, and SmartCloud Control Desk. Vulnerability Details DESCRIPTION:...

Security Vulnerabilities Addressed in Asset and Service Mgmt

Abstract Security Bulletin: Vulnerabilities in Maximo Asset Mgmt, Tivoli Asset Mgmt for IT, Tivoli Service Request Mgr, Change and Configuration Mgmt Database, and SmartCloud Control Desk. See Details for CVE IDs. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-0714, CVE-2012-0727, CVE-2012-0728,...

Security Bulletin: Rational Lifecycle Adapter for HP ALM Apache Tomcat fix (CVE-2013-4286, CVE-2014-0033, CVE-2013-4322, CVE-2013-4590, CVE-2014-0075, CVE-2014-0095, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119)

Summary A vulnerability has been identified in Rational Lifecycle Adapter for HP ALM V1.0 and V1.1. If you are using Apache Tomcat 7.x to run your HP ALM adapter, download and install the Apache Tomcat fix available on Fix Central. Vulnerability Details | Subscribe to My Notifications to be...

PT-2018-10988 · Ellislab · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter versions prior to 3.1.9 Description: A Session Fixation issue exists because session.use strict mode in the Session Library was mishandled. This issue can be exploited due to the mishandling of the session configuration...

Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by a Session Identifier Not Updated vulnerability

Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1375 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG does not renew a session variable after a successful authentication which could lead to...

Security Bulletin: Session Identifier Not Updated vulnerability affects IBM Security Guardium (CVE-2017-1270 )

Summary IBM Security Guardium does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. IBM Security Guardium has fixed this vulnerability. Vulnerability Details CVEID: CVE-2017-1270 DESCRIPTION: IBM Security Guardium does no...

Session Fixation

symfony is vulnerable to session fixation. A malicious user that has access to a PHPSESSID can use it through the Guard Authentication feature in a Symfony application to impersonate another user...