261 matches found
Security Bulletin: Query Parameter in SSL vulnerability in IBM Operations Analytics - Log Analysis
Summary When session timeout occurs, Log Analysis UI asks to re-enter the password. Requests sent over SSL contain the query parameter name, value or combination of values like username and password. Vulnerability Details Third Party Entry: PSIRT-ADV0022529 DESCRIPTION: Created from Advisory:...
How to Adjust the Veeam Service Provider Console Web UI Session Timeout
Purpose This article documents how to modify the Veeam Service Provider Console configuration to adjust the Web UI timeout. The default Web UI timeout is 1 hour, and tokens are good for up to 48 hours. Solution Tip: Use the copy button in the text blocks below to simplify specifying which file to...
Cisco Firepower Threat Defense Software Management Interface Denial of Service Vulnerability
A vulnerability in how Cisco Firepower Threat Defense FTD Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote management connections to an affected device, which could result in a denial of service DoS condition...
CVE-2020-3188: Insufficient Session Expiration
A vulnerability in how Cisco Firepower Threat Defense FTD Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote management connections to an affected device, which could result in a denial of service DoS condition...
PT-2020-2505
Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense FTD Software affected versions not specified Description The issue is related to errors in resource management, which could allow a remote attacker to cause a denial of service DoS condition by creating a large...
CVE-2020-10714
A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as...
CVE-2020-11795
In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...
CVE-2020-11795
In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...
Code injection
In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...
CVE-2020-11795
In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...
CVE-2020-11795
JetBrains Space (through 2020-04-22) has a session timeout misconfiguration affecting the Space component, per CVE-2020-11795. Connected sources confirm Space’s session timeout issue existed in versions up to 2020-04-22, described as an improper session timeout configuration. The JetBrains Q1-202...
CVE-2020-11795: Insufficient Session Expiration
In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...
PT-2020-12851
Name of the Vulnerable Software and Affected Versions JetBrains Space versions prior to 2020-04-22 Description The session timeout period in JetBrains Space was configured improperly, which could lead to issues. Recommendations For versions prior to 2020-04-22, update the configuration to properl...
CSRF Token Information Disclosure in MC
Summary The Management Center MC web UI is susceptible to a CSRF token disclosure vulnerability. A remote attacker, who has access to an authenticated MC user's web browser history or a network device that intercepts/logs traffic to MC, can obtain CSRF tokens and use them to perform CSRF attacks...
Security Bulletin: IBM Integration Bus is affected by WebAdmin Session Timeout vulnerability (CVE-2017-1693)
Summary IBM Integration Bus has addressed the following vulnerability Vulnerability Details CVEID: CVE-2017-1693 DESCRIPTION: IBM Integration Bus could allow an attacker that has captured a valid session id to highjack another users session during a small timeframe before the session times out...
UBUNTU-CVE-2020-1768
The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions...
Qualys Cloud Platform (VM, PC) 8.20 New Features
This new release of the Qualys Cloud Platform VM, PC, version 8.20, includes several new features in Qualys Cloud Platform and additional support for multiple technologies in Qualys Policy Compliance. Feature Highlights Qualys Cloud Platform Configure Password Expiration Notification – Now users...
Pydio Core <= 8.2.2 Information Disclosure Vulnerability - Active Check
Pydio Core is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pydio:pydio";...