Session fixation

An issue was discovered in Halvotec RaQuest 10.23.10801.0. It allows session fixation. Fixed in Release 24.2020.20608.0...

CVE-2019-19610

An issue was discovered in Halvotec RaQuest 10.23.10801.0. It allows session fixation. Fixed in Release 24.2020.20608.0...

CVE-2019-19610

The CVE-2019-19610 entry describes a session fixation vulnerability affecting Halvotec RaQuest version 10.23.10801.0. The issue is that an attacker could influence or abuse a user’s session identifier, with the fixed version released as 24.2020.20608.0. The vulnerability is demonstrated in the co...

CVE-2019-4617

IBM Cloud Automation Manager 3.2.1.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 168645...

CVE-2019-4617

IBM Cloud Automation Manager 3.2.1.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 168645...

Session fixation

IBM Cloud Automation Manager 3.2.1.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 168645...

CVE-2019-4617

IBM Cloud Automation Manager 3.2.1.0 is affected by CVE-2019-4617: it does not renew the session variable after successful authentication, enabling session fixation/hijacking where a user could be forced to use a cookie potentially known to an attacker. The IBM Security Bulletin confirms the vuln...

CVE-2019-4617

IBM Cloud Automation Manager 3.2.1.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 168645...

CVE-2019-19610: Session Fixation

An issue was discovered in Halvotec RaQuest 10.23.10801.0. It allows session fixation. Fixed in Release 24.2020.20608.0...

CVE-2019-4617: Session Fixation

IBM Cloud Automation Manager 3.2.1.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 168645...

PT-2020-10993

Name of the Vulnerable Software and Affected Versions IBM Cloud Automation Manager version 3.2.1.0 Description The issue is related to a session fixation/hijacking vulnerability. It occurs because the session variable is not renewed after a successful authentication, which could force a user to...

PT-2020-10197

Name of the Vulnerable Software and Affected Versions Halvotec RaQuest versions prior to 24.2020.20608.0 Description An issue was discovered that allows session fixation. The vendor does not recognize this issue and will not patch it. Recommendations For versions prior to 24.2020.20608.0, conside...

CVE-2020-5543: Session Fixation

TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier does not properly manage sessions, which allows remote attackers to stop the network functions or execute malware via a specially crafted packet...

Security Bulletin: IBM Cloud Automation Manager Session Fixation Vulnerability (CVE-2019-4617)

Summary IBM Cloud Automation Manager Session Fixation Vulnerability Vulnerability Details CVEID: CVE-2019-4617 DESCRIPTION: IBM Cloud Automation Manager does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could for...

Session fixation

SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow attackers with local access, for instance, to still download the portables...

SUSE-SU-2020:0632-1 Security update for tomcat

This update for tomcat to version 9.0.31 fixes the following issues: Security issues fixed: - CVE-2019-10072: Fixed a denial-of-service that could have been caused by clients omitting WINDOWUPDATE messages in HTTP/2 streams bsc1139924. - CVE-2019-12418: Fixed a local privilege escalation by...

CVE-2020-9370: Session Fixation

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

Apache Tomcat 9.0.0.M1 < 9.0.30 Session Fixation

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 or 7.0.0 to 7.0.98. It is, therefore, affected by a session fixation vulnerability when using FORM authentication. Note that the scanner has not attempted to exploit these issues but has instead relie...

Apache Tomcat 7.0.x < 7.0.99 Session Fixation

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 or 7.0.0 to 7.0.98. It is, therefore, affected by a session fixation vulnerability when using FORM authentication. Note that the scanner has not attempted to exploit these issues but has instead relie...

Apache Tomcat 8.5.x < 8.5.50 Session Fixation

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 or 7.0.0 to 7.0.98. It is, therefore, affected by a session fixation vulnerability when using FORM authentication. Note that the scanner has not attempted to exploit these issues but has instead relie...