Default credentials

In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the edited user...

CVE-2022-24341

The CVE-2022-24341 issue affects JetBrains TeamCity (before 2021.2.1). The vulnerability is that editing a user account to change its password did not terminate the edited user’s existing sessions, allowing continued access after password change. Severity per CVSS: CVSSv3.1 base score 7.5 (High) ...

Linux kernel 加密问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a security flaw that could be exploited by an attacker to inject data into a victim's TCP session or terminate that session...

CVE-2021-25970

CVE-2021-25970 : Camaleon CMS (0.1.7–2.6.0) suffers from insufficient session expiration; active sessions aren’t terminated after password changes, allowing logged-in users continued access. Public advisories (GitHub GHSA-438X-2P9V-G8H9, Red Hat RH: CVE-2021-25970) align on the issue and confirm ...

CVE-2021-25966

In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even aft...

CVE-2021-25966

In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even aft...

Session fixation

In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even aft...

CVE-2021-25966 Orchard Core CMS - Improper Session Termination after Password Change

In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even aft...

CVE-2021-25966 Orchard Core CMS - Improper Session Termination after Password Change

In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even aft...

CVE-2021-25966

CVE-2021-25966 affects Orchard Core CMS: versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change, allowing a user who was already logged in to retain access even after the password is changed. The connected sources provide explicit details on aff...

OrchardCMS 代码问题漏洞

OrchardCMS is an open source modular and multi-tenant application framework built using ASP.NET Core and the Content Management System CMS built on top of it. A code issue exists in OrchardCMS that originates in the "Orchard core CMS" application, versions 1.0.0-beta1-3383 through 1.0.0, which is...

Man-in-the-middle (MITM)

nbdkit:sid is vulnerable to man-in-the-middle. A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBDOPTSTRUCTUREDREPLY before proxying everything else a client sends to the...

UBUNTU-CVE-2021-37156

Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated...

PT-2021-16930 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.27 Description: An issue was discovered in the CMS functions where existing user sessions were not properly terminated when a user's password was changed or the user was blocked. Recommendations: For Joomla!...

The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of automatic termination of all sessions after changing passwords. This allows attackers to gain unauthorized access to limited resources.

The vulnerability of the Magento Commerce software development and management platform lies in the lack of automatic termination of all sessions after the password is changed. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to limited resources...

CVE-2020-25241

A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions...

mymbCONNECT24 安全漏洞

Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A security vulnerability exists in mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2, which stems from the improper...

PT-2021-2300 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to the lack of automatic termination of all sessions after a password change, which could allow a...

CVE-2020-1666 Junos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnection

The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected. This could allow a malicious attacker with physical access to the console the ability to resume a previous interactiv...

The vulnerability of the TrueConf Server software lies in the lack of a mechanism to terminate the user’s access session, allowing attackers to intercept the user’s session.

The vulnerability of the TrueConf Server software is related to the absence of a mechanism to terminate the user’s access session. Exploiting this vulnerability could allow a malicious actor to intercept the user’s session...