Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-45cq-w2jp-hqp4

Опубликовано: 09 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS4: 5.4
CVSS3: 5

Описание

In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session.

In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session.

EPSS

Процентиль: 13%
0.00043
Низкий

5.4 Medium

CVSS4

5 Medium

CVSS3

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 7
nvd
больше 2 лет назад

In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session.

EPSS

Процентиль: 13%
0.00043
Низкий

5.4 Medium

CVSS4

5 Medium

CVSS3

Дефекты

CWE-384