Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qrfj-w3wq-p623

Опубликовано: 01 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized access and account takeover. This occurs due to insufficient session expiration, where session tokens remain valid beyond logout, allowing an attacker to impersonate users and perform actions on their behalf.

A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized access and account takeover. This occurs due to insufficient session expiration, where session tokens remain valid beyond logout, allowing an attacker to impersonate users and perform actions on their behalf.

EPSS

Процентиль: 18%
0.00056
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 4.6
nvd
10 месяцев назад

A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized access and account takeover. This occurs due to insufficient session expiration, where session tokens remain valid beyond logout, allowing an attacker to impersonate users and perform actions on their behalf.

EPSS

Процентиль: 18%
0.00056
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-613