Insecure Session Management

2022-10-2008:18:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

rdiffweb

insecure session management

user sessions

persistent timeout

unauthorized actions

EPSS

0.002

Percentile

59.6%

JSON

rdiffweb is vulnerable to insecure session management. The vulnerability exists because user sessions are not properly defined with session persistent timeout which allows an attacker to access the active sessions of other users and perform unauthorized actions.