1553 matches found
CVE-2024-29402
cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity...
PT-2024-22883 · Cskefu · Cskefu
Name of the Vulnerable Software and Affected Versions: cskefu version 7 Description: The issue is related to Insufficient Session Expiration, which allows attackers to exploit old sessions for malicious activity. Recommendations: For cskefu version 7, consider implementing proper session expirati...
Gin-Vue-Admin 安全漏洞
Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin development. A security vulnerability exists in Gin-Vue-Admin version 2.4.x that stems from a vulnerability that allows an attacker to escalate privileges via the Session Expiration component...
PT-2024-24200 · Unknown · Gin-Vue-Admin
Name of the Vulnerable Software and Affected Versions: sanluan flipped-aurora gin-vue-admin versions 2.4.x Description: An issue in the Session Expiration component allows an attacker to escalate privileges. Recommendations: For versions 2.4.x, consider restricting access to the Session Expiratio...
CVE-2024-31760
An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...
CVE-2024-29402
cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity...
CVE-2024-31760
CVE-2024-31760 affects sanluan flipped-aurora gin-vue-admin 2.4.x. The Session Expiration component allows privilege escalation. A PoC exists per the Exploitation metadata, and the CVSSv3.1 score is 4.7 (Medium). No patch/version remediation is specified in the provided documents; one source note...
Insufficient Session Expiration
@digitalbazaar/zcap is vulnerable to Insufficient Session Expiration. This vulnerability is due to improper validation of the expires property when invoking a capability with a chain depth of 2, allowing invocations outside the intended period...
Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) may be susceptible to an Insufficient Session Expiration vulnerability (CVE-2024-22358)
Summary IBM DevOps Deploy / IBM UrbanCode Deploy UCD may not fully invalidate the session after logout which could allow an authenticated user to impersonate another user on the system. Vulnerability Details CVEID:CVE-2024-22358 DESCRIPTION: IBM UrbanCode Deploy UCD does not invalidate session...
CVE-2024-31999
@festify/secure-session creates a secure stateless cookie session for Fastify. At the end of the request handling, it will encrypt all data in the session with a secret key and attach the ciphertext as a cookie value with the defined cookie name. After that, the session on the server side is...
JVN#82074338: Multiple vulnerabilities in NEC Aterm series
Aterm series provided by NEC Corporation contains multiple vulnerabilities listed below. Incorrect Permission Assignment for Critical Resource CWE-732 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 8.0 CVE-2024-28005 Exposure of Sensitive System Information to an Unauthorized Control...
The vulnerability of the Mastodon web application for deploying distributed social networks relates to the incorrect expiration time of the session, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of the Mastodon web application for deploying distributed social networks is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Dell PowerScale OneFS Code Issue Vulnerability
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A code issue vulnerability exists in Dell PowerScale OneFS that stems from the presence of a session expiration vulnerability that can be exploited by an...
CVE-2024-25954
Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session expiration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service...
CVE-2024-25954
Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session expiration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service...
CVE-2024-25954
Dell PowerScale OneFS (versions 9.5.0.x–9.7.0.x) contains an insufficient session expiration vulnerability that can be exploited remotely by an unauthenticated attacker to cause a denial of service. Evidence from multiple sources confirms the affected product and impact; the CVSS base metrics ind...
CVE-2024-25954
Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session expiration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service...
PT-2024-2507 · Dell · Dell Powerscale Onefs
Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.5.0.x through 9.7.0.x Description: The issue is related to an insufficient session expiration vulnerability. A remote unauthenticated attacker could potentially exploit this, leading to denial of service...