Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xrgp-j4fj-fqwr

Опубликовано: 05 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.6

Описание

A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks, facilitates session hijacking attacks against victims. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks, facilitates session hijacking attacks against victims. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

EPSS

Процентиль: 31%
0.0012
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 5.6
nvd
почти 2 года назад

A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks, facilitates session hijacking attacks against victims. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

EPSS

Процентиль: 31%
0.0012
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-613