711 matches found
CVE-2012-5158
Puppet Enterprise PE before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via unspecified vectors...
CVE-2012-5158
Removed by vendor...
PT-2014-2300
Name of the Vulnerable Software and Affected Versions Puppet Enterprise PE versions prior to 2.6.1 Description The issue allows remote authenticated users to retain access via unspecified vectors when the session secret has changed, due to improper session invalidation. Recommendations For versio...
CVE-2013-5413: Improper Authentication
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation...
Django Vulnerability Could Allow Attackers Access to Cookies
A security vulnerability in the web framework Django could make it easier for an attacker to steal a user’s cookie and log into their website even after they’ve logged out. The session invalidation vulnerability was discovered by G.S. McNamara, the same researcher who dug up a similar vulnerabili...
PT-2013-4087
Name of the Vulnerable Software and Affected Versions IBM Security AppScan Enterprise versions prior to 8.7 Description The issue allows remote attackers to hijack sessions by leveraging an unattended workstation, due to the failure to invalidate the session context upon a logout action...
CVE-2013-4762
Removed by vendor...
PT-2013-5179
Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 3.0.1 Description The issue arises from insufficient session invalidation when a user logs out, potentially allowing remote attackers to hijack sessions by obtaining an old session ID. Recommendations For...
Design/Logic Flaw
The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a sessio...
