Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13015
HistoryJan 15, 2019 - 9:24 a.m.

Replay Attack

2019-01-1509:24:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.002 Low

EPSS

Percentile

58.4%

tendrl-api is vulnerable to replay attack. The server does not invalidate session tokens immediately when a user logs out of the application. This allows an attacker, who has obtained a user’s session tokens via sniffing/MitM attack, to re-use or replay a user’s session token or request to gain access to the application as the target user.

References

0.002 Low

EPSS

Percentile

58.4%