Lucene search
Veracode Vulnerability DatabaseVERACODE:35276HistoryApr 27, 2022 - 1:56 p.m.
Insecure Session
2022-04-2713:56:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
38.5%
hoteldruid has insecure session token. The vulnerability exists due to an exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id’s.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hoteldruid:sid | eq | 3.0.1-1 | |
| hoteldruid:sid | eq | 3.0.1-1 |
Related
debiancve
debiancve
CVE-2021-42948
2022-09-16 16:15:09
ubuntucve
ubuntucve
CVE-2021-42948
2022-09-16 00:00:00
githubexploit
githubexploit
Exploit for CVE-2021-42948
2022-02-19 21:01:12
cve
cve
CVE-2021-42948
2022-09-16 16:15:09
cvelist
cvelist
CVE-2021-42948
2022-09-16 15:14:35
nvd
nvd
CVE-2021-42948
2022-09-16 16:15:09
prion
prion
Hardcoded credentials
2022-09-16 16:15:00