CVE-2022-40916

Tiny File Manager v2.4.7 and below is vulnerable to session fixation...

CVE-2025-24503

A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server...

CVE-2024-42207

HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session...

CVE-2022-40916

Tiny File Manager v2.4.7 and below is vulnerable to session fixation...

CVE-2022-40916

Tiny File Manager v2.4.7 and below is vulnerable to session fixation...

CVE-2022-40916

Tiny File Manager v2.4.7 and below is vulnerable to session fixation...

CVE-2022-40916

Tiny File Manager vulnerability CVE-2022-40916 affects version 2.4.7 and earlier, due to a session-management flaw that enables session fixation. The issue is documented as a high-severity (CVSS 9.8) risk with network attack potential and no user interaction required. Public references indicate a...

CVE-2022-40916

Tiny File Manager v2.4.7 and below is vulnerable to session fixation...

PT-2025-5834 · Unknown · Tiny File Manager

Name of the Vulnerable Software and Affected Versions: Tiny File Manager versions 2.4.7 and below Description: The issue concerns session fixation. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where thi...

CVE-2022-2820

Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...

CVE-2024-42207

HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session...

CVE-2024-42207

HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session...

CVE-2024-42207

CVE-2024-42207 concerns HCL iAutomate and describes a session fixation vulnerability that could allow an attacker to hijack a victim’s session ID from an authenticated session. Multiple sources corroborate the issue but do not provide concrete patch details or affected versions. PT-Security notes...

CVE-2024-42207 HCL iAutomate is affected by a session fixation vulnerability

HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session...

CVE-2024-42207 HCL iAutomate is affected by a session fixation vulnerability

HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session...

CVE-2024-11317

Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

PT-2025-5702 · Hcl · Hcl Iautomate

Name of the Vulnerable Software and Affected Versions: HCL iAutomate affected versions not specified Description: The issue is related to a session fixation problem. An attacker could hijack a victim's session ID from their authenticated session. Recommendations: At the moment, there is no...

CVE-2024-56529

Mailcow through 2024-11b has a session fixation vulnerability in the web panel. It allows remote attackers to set a session identifier when HSTS is disabled on a victim's browser. After a user logs in, they are authenticated and the session identifier is valid. Then, a remote attacker can access...

CVE-2024-56529

CVE-2024-56529 concerns Mailcow’s web panel up to version 2024-11b, where a session fixation flaw allows an attacker to set a session ID when a victim’s browser has HSTS disabled. After user authentication, the attacker can reuse the same session ID to access the victim’s web panel. Root cause: o...

CVE-2024-56529

Mailcow through 2024-11b has a session fixation vulnerability in the web panel. It allows remote attackers to set a session identifier when HSTS is disabled on a victim's browser. After a user logs in, they are authenticated and the session identifier is valid. Then, a remote attacker can access...