Lucene search
Veracode Vulnerability DatabaseVERACODE:29349HistoryFeb 11, 2021 - 3:57 a.m.
Insecure Session Management
2021-02-1103:57:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.007 Low
EPSS
Percentile
80.8%
october/rain uses insecure session management. Lack of proper validation of session ID at logging out allows an attacker with an old (invalid) session ID to bypass intended Auth/Manager.php authentication behavior during a new login.
| CPE | Name | Operator | Version |
|---|---|---|---|
| october/rain | le | v1.1.1 | |
| october/rain | le | v1.0.471 |
Related
cve
cve
CVE-2021-3311
2021-02-05 14:15:19
cvelist
cvelist
CVE-2021-3311
2021-02-05 04:47:53
prion
prion
Authentication flaw
2021-02-05 14:15:00
osv
osv
CVE-2021-3311
2021-02-05 14:15:19
October CMS Session ID not invalidated after logout
2021-02-10 02:32:35
nvd
nvd
CVE-2021-3311
2021-02-05 14:15:19
github
github
October CMS Session ID not invalidated after logout
2021-02-10 02:32:35