Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mqvw-2h8p-cf8g

Опубликовано: 01 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions.

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions.

EPSS

Процентиль: 52%
0.00293
Низкий

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 8.1
nvd
около 4 лет назад

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions.

EPSS

Процентиль: 52%
0.00293
Низкий

Дефекты

CWE-613