Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-25896

Опубликовано: 01 июл. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.8
CVSS3: 4.8

Описание

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

0.6.0+~1.0.0-1
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

not-affected

0.6.0+~1.0.0-1
esm-apps/resolute

not-affected

0.6.0+~1.0.0-1
esm-apps/xenial

ignored

end of ESM support, was needs-triage
focal

ignored

end of standard support, was needs-triage

Показывать по

EPSS

Процентиль: 62%
0.01058
Низкий

5.8 Medium

CVSS2

4.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.8
redhat
около 4 лет назад

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

CVSS3: 4.8
nvd
около 4 лет назад

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

CVSS3: 4.8
debian
около 4 лет назад

This affects the package passport before 0.6.0. When a user logs in or ...

CVSS3: 4.8
github
около 4 лет назад

Passport vulnerable to session regeneration when a users logs in or out

EPSS

Процентиль: 62%
0.01058
Низкий

5.8 Medium

CVSS2

4.8 Medium

CVSS3

Уязвимость CVE-2022-25896