Lucene search
Veracode Vulnerability DatabaseVERACODE:35277HistoryApr 27, 2022 - 1:56 p.m.
Insecure Token
2022-04-2713:56:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.003 Low
EPSS
Percentile
68.7%
hoteldruid has insecure session. The vulnerability exists due to a predictable session token, allowing attackers to bypass authentication via bruteforce attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hoteldruid:sid | eq | 3.0.1-1 | |
| hoteldruid:sid | eq | 3.0.1-1 |
Related
cve
cve
CVE-2021-42949
2022-09-16 15:15:09
nvd
nvd
CVE-2021-42949
2022-09-16 15:15:09
ubuntucve
ubuntucve
CVE-2021-42949
2022-09-16 00:00:00
githubexploit
githubexploit
Exploit for CVE-2021-42949
2022-02-19 21:02:42
debiancve
debiancve
CVE-2021-42949
2022-09-16 15:15:09
prion
prion
Authentication flaw
2022-09-16 15:15:00
cvelist
cvelist
CVE-2021-42949
2022-09-16 14:45:36