CVE-2021-25981

CVE-2021-25981 affects Talkyard. Versions v0.2021.20–v0.2021.33 (regular) and v0.2021.20–v0.2021.34 (dev) are vulnerable to Insufficient Session Expiration. The underlying issue allows an attacker who can obtain a still-valid admin session token (via other, hypothetical attacks) to reuse that tok...

CVE-2021-25981

In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the admin’s still-valid session token even when logged-out, to gain admin privileges, given the attack...

CVE-2021-25981: Insufficient Session Expiration

In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the admin’s still-valid session token even when logged-out, to gain admin privileges, given the attack...

PT-2022-9686

Name of the Vulnerable Software and Affected Versions Talkyard versions v0.2021.20 through v0.2021.33 Talkyard dev versions v0.2021.20 through v0.2021.34 Description The issue is related to Insufficient Session Expiration, which may allow an attacker to reuse the admin's still-valid session token...

CVE-2021-35034

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted...

CVE-2021-35034

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted...

Session fixation

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted...

CVE-2021-35034

Zyxel NBG6604 firmware CGI program has an insufficient session expiration vulnerability that can let a remote attacker access the device if the correct token is intercepted. Impact is unauthorized access via the network; exploitation is network-based with no user interaction. No explicit remediat...

CVE-2021-35034: Insufficient Session Expiration

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted...

CVE-2021-45885: Insufficient Session Expiration

An issue was discovered in Stormshield Network Security SNS 4.2.2 through 4.2.7 fixed in 4.2.8. Under a specific update-migration scenario, the first SSH password change does not properly clear the old password...

PT-2021-6109

Name of the Vulnerable Software and Affected Versions Zyxel NBG6604 firmware affected versions not specified Description The issue is related to an insufficient session expiration in the CGI program of the Zyxel NBG6604 firmware. This could allow a remote attacker to access the device if the...

WS-2021-0488

An insufficient session expiration vulnerability in “vc-platform VirtoCommerce” application version v2.1 to v3.79.0 may allow an attacker to reuse the unexpired admin user session cookie to gain admin privileges, should the attacker be able to obtain that session cookie via other, hypothetical...

CVE-2021-43791: Insufficient Session Expiration

Zulip is an open source group chat application that combines real-time chat with threaded conversations. In affected versions expiration dates on the confirmation objects associated with email invitations were not enforced properly in the new account registration flow. A confirmation link takes a...

CVE-2021-36330

Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user...

CVE-2021-36330

Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user...

Session fixation

Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user...

CVE-2021-36330

Dell EMC Streaming Data Platform versions before 1.3 are affected by an Insufficient Session Expiration vulnerability. A remote unauthenticated attacker could reuse old session artifacts to impersonate a legitimate user. A Dell-emitted security update (DSA-2021-205) exists to address third-party ...

CVE-2021-36330

Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user...

CVE-2021-42545

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...

CVE-2021-42545

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...