CVE-2020-6290

SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID...

CVE-2020-6290

SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID...

CVE-2020-6290

SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks where an attacker tricks a user into using a specific session ID. The NVD notes a network-exposed vector with user interaction required, and impact on confidentiality, integrity, and availability is Low. No explici...

PT-2020-19080

Name of the Vulnerable Software and Affected Versions SAP Disclosure Management version 10.1 Description The issue allows an attacker to perform Session Fixation attacks by tricking the user into using a specific session ID. Recommendations For SAP Disclosure Management version 10.1, update to a...

CVE-2020-6290: Session Fixation

SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID...

CVE-2019-4591: Session Fixation

IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 167451...

Multiple vulnerabilities in TCP/IP function on Mitsubishi Electric GOT2000 series

Overview TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series GT27, GT25, and GT23 contains multiple vulnerabilities listed below. Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-119 - CVE-2020-5595 Session Fixation CWE-384 - CVE-2020-5596 NUL...

CVE-2020-5596: Session Fixation

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model does not properly manage sessions, which may allow a remote attacker to stop the network functions of the products or execute a...

Mitsubishi Electric GOT2000 Series

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: GOT2000 Series Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Session Fixation, NULL Pointer Dereference, Improper Access...

MySQL Enterprise Monitor 4.0.11.x < 4.0.12.5341 / 8.0.18.x < 8.0.20.1227(Apr 2020 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 4.0.11.x prior to 4.0.12.5341 or 8.0.18.x prior to 8.0.20.1227. It is, therefore, affected by a session fixation vulnerability. An unauthenticated, remote attacker could exploit this to...

CVE-2020-15018

playSMS through 1.4.3 is vulnerable to session fixation...

CVE-2020-15018

playSMS through 1.4.3 is vulnerable to session fixation...

CVE-2020-15018

playSMS through 1.4.3 is vulnerable to session fixation...

Session fixation

playSMS through 1.4.3 is vulnerable to session fixation...

CVE-2020-15018

playSMS through 1.4.3 is vulnerable to session fixation...

CVE-2020-15018

CVE-2020-15018 affects playSMS up to version 1.4.3 and is described as vulnerable to session fixation. Connected sources indicate an attacker could leverage this issue to establish or hijack a user session and take control of a user’s account, implying impact to authentication/session integrity. ...

CVE-2020-15018

playSMS through 1.4.3 is vulnerable to session fixation...

CVE-2020-15018: Session Fixation

playSMS through 1.4.3 is vulnerable to session fixation...

PT-2020-14123

Name of the Vulnerable Software and Affected Versions playSMS versions 1.4.3 and earlier Description The issue allows for session fixation. Recommendations For playSMS versions 1.4.3 and earlier, update to a version later than 1.4.3 to resolve the issue...

Session fixation

An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID via other, hypothetical attacks...