Lucene search
Veracode Vulnerability DatabaseVERACODE:38011HistoryNov 16, 2022 - 3:15 a.m.
Improper Session Management
2022-11-1603:15:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
rdiffweb
vulnerability
improper session management
session tokens
password change
users
EPSS
0.002
Percentile
57.1%
rdiffweb is vulnerable to Improper Session Management. The vulnerability exists because the library does not invalidate all the session tokens for a user on a password change, resulting in users logged in with the old password to continue being logged in.
Related
nvd
nvd
CVE-2022-3362
2022-11-14 21:15:16
cve
cve
CVE-2022-3362
2022-11-14 21:15:16
osv
osv
rdiffweb vulnerable to Insufficient Session Expiration
2022-11-15 12:00:17
PYSEC-2022-43000
2022-11-14 21:15:00
CVE-2022-3362
2022-11-14 21:15:16
cvelist
cvelist
CVE-2022-3362 Insufficient Session Expiration in ikus060/rdiffweb
2022-11-14 00:00:00
github
github
rdiffweb vulnerable to Insufficient Session Expiration
2022-11-15 12:00:17
huntr
huntr
Session does not expire on password reset
2022-09-29 19:00:03
prion
prion
Session fixation
2022-11-14 21:15:00