Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3f8r-x482-8qpg

Опубликовано: 10 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.9

Описание

Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session.  

Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session.  

EPSS

Процентиль: 43%
0.00206
Низкий

3.9 Low

CVSS3

Дефекты

CWE-384
CWE-613

Связанные уязвимости

CVSS3: 3.9
nvd
почти 2 года назад

Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session.  

EPSS

Процентиль: 43%
0.00206
Низкий

3.9 Low

CVSS3

Дефекты

CWE-384
CWE-613