Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40695
HistoryMay 26, 2023 - 5:04 a.m.

Session Fixation

2023-05-2605:04:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
session fixation
apache inlong
insufficient session expiration
attacker
old sessions
user deletion
password change

EPSS

0.003

Percentile

65.3%

org.apache.inlong is vulnerable to Session Fixation. The vulnerability exists due to insufficient session expiration, which allows an attacker to use old sessions even after the user has been deleted or the password has been changed.

EPSS

0.003

Percentile

65.3%