Session fixation

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 inclusive, due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this...

CVE-2022-40630 Improper Session Management Vulnerability in Tacitine Firewall

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 inclusive, due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this...

CVE-2022-40630

CVE-2022-40630 affects Tacitine Firewall EN6200 family: EN6200-PRIME QUAD-35 and QUAD-100, versions 19.1.1–22.20.1. Root cause is improper session management in the web-based management interface, enabling an unauthenticated remote attacker to perform session fixation. Impact is session fixation ...

CVE-2022-3269

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...

Session fixation

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...

PYSEC-2022-290

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...

PYSEC-2022-290

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...

CVE-2022-3269 Session Fixation in ikus060/rdiffweb

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...

CVE-2022-3269 Session Fixation in ikus060/rdiffweb

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...

CVE-2022-3269

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...

CVE-2022-3269

CVE-2022-3269 affects the rdiffweb web application (itas ikus060/rdiffweb) prior to version 2.4.7. The root cause is failure to invalidate session cookies on logout, enabling session fixation where an attacker can reuse a valid cookie to access a user account after login/logout sequences. Impact ...

CVE-2022-3269 Session Fixation in ikus060/rdiffweb

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...

[SECURITY] [DSA 5237-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5237-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 23, 2022 https://www.debian.org/security/faq -...

Session fixation

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prior to 4.10.15, or 5.0.0 and above prior to 5.2.6, a user can write to the session object of another user if the session object ID is known. For example, an attacker can assign th...

Tacitine EN6200 授权问题漏洞

Tacitine Firewall EN6200 is a series of firewalls from Tacitine. The Tacitine Firewall EN6200 suffers from an Access Control Error vulnerability that stems from improper session management in Tacitine's web-based management interface. An unauthenticated, remote attacker could exploit the...

PT-2022-21435

Name of the Vulnerable Software and Affected Versions rdiffweb versions prior to 2.4.7 Description The issue allows an attacker to gain unauthorized access to a user's account due to session fixation. This occurs because the application fails to invalidate session cookies on logout, causing the...

PT-2022-25428 · Unknown · Tacitine Firewall +2

Name of the Vulnerable Software and Affected Versions: Tacitine Firewall versions 19.1.1 through 22.20.1 EN6200-PRIME QUAD-35 versions 19.1.1 through 22.20.1 EN6200-PRIME QUAD-100 versions 19.1.1 through 22.20.1 Description: This issue is due to improper session management in the Tacitine Firewal...

CVE-2022-40630: Session Fixation

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 inclusive, due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this...

CVE-2022-3269: Session Fixation

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...

Mozilla Thunderbird < 102.3

The version of Thunderbird installed on the remote Windows host is prior to 102.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-42 advisory. - Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team...