Lucene search
Veracode Vulnerability DatabaseVERACODE:38937HistoryJan 20, 2023 - 5:11 a.m.
Session Fixation
2023-01-2005:11:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
shopware
platform
vulnerability
session fixation
admin session time
access token
0.002 Low
EPSS
Percentile
55.8%
shopware/platform is vulnerable to Session Fixation. The vulnerability exists because the library does not properly limit the admin session time, allowing an attacker to use the access token to continue the session without refreshing the token.
| CPE | Name | Operator | Version |
|---|---|---|---|
| shopware/platform | le | 6.4.18.0 | |
| shopware/platform | le | 6.4.18.0 |
Related
osv
osv
Shopware has Insufficient Session Expiration in Administration
2023-01-20 23:18:17
CVE-2023-22732
2023-01-17 22:15:11
cvelist
cvelist
CVE-2023-22732 Insufficient Session Expiration in Administration in shopware
2023-01-17 21:34:26
prion
prion
Design/Logic Flaw
2023-01-17 22:15:00
github
github
Shopware has Insufficient Session Expiration in Administration
2023-01-20 23:18:17
nvd
nvd
CVE-2023-22732
2023-01-17 22:15:11
cve
cve
CVE-2023-22732
2023-01-17 22:15:11