Lucene search
Veracode Vulnerability DatabaseVERACODE:10844HistoryJan 15, 2019 - 8:52 a.m.
Privilege Escalation
2019-01-1508:52:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
34.4%
The Luci in Red Hat Conga is vulnerable to privilege escalation. Storing usernames and passwords in __ac session cookies leads to incorrect session inactivity timeout and to get access to the user credential via the cookie.
References
rhn.redhat.com/errata/RHSA-2013-0128.html
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=607179
bugzilla.redhat.com/show_bug.cgi?id=832181
bugzilla.redhat.com/show_bug.cgi?id=832183
bugzilla.redhat.com/show_bug.cgi?id=832185
bugzilla.redhat.com/show_bug.cgi?id=835649
bugzilla.redhat.com/show_bug.cgi?id=839732
rhn.redhat.com/errata/RHSA-2013-0128.html
Related
openvas
openvas
CentOS Update for luci CESA-2013:0128 centos5
2013-01-21 00:00:00
Oracle: Security Advisory (ELSA-2013-0128)
2015-10-06 00:00:00
CentOS Update for luci CESA-2013:0128 centos5
2013-01-21 00:00:00
redhat
redhat
(RHSA-2013:0128) Low: conga security, bug fix, and enhancement update
2013-01-08 00:00:00
nessus
nessus
Scientific Linux Security Update : conga on SL5.x i386/x86_64 (20130108)
2013-01-17 00:00:00
RHEL 5 : conga (RHSA-2013:0128)
2013-01-24 00:00:00
CentOS 5 : conga (CESA-2013:0128)
2013-01-17 00:00:00
centos
centos
luci, ricci security update
2013-01-10 21:00:01
oraclelinux
oraclelinux
conga security, bug fix, and enhancement update
2013-01-11 00:00:00
nvd
nvd
CVE-2012-3359
2014-03-31 14:58:43
CVE-2013-7347
2014-03-31 14:58:45
prion
prion
Design/Logic Flaw
2014-03-31 14:58:00
Design/Logic Flaw
2014-03-31 14:58:00
cvelist
cvelist
CVE-2013-7347
2014-03-30 00:00:00
CVE-2012-3359
2014-03-30 00:00:00
cve
cve
CVE-2012-3359
2014-03-31 14:58:43
CVE-2013-7347
2014-03-31 14:58:45