Количество 3
Количество 3
CVE-2021-42761
A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3.16, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 through 6.0.7, 5.9.0 through 5.9.1 may allow a remote, unauthenticated attacker to infer the session identifier of other users and possibly usurp their session.
GHSA-hxmr-8629-frhp
A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3.16, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 through 6.0.7, 5.9.0 through 5.9.1 may allow a remote, unauthenticated attacker to infer the session identifier of other users and possibly usurp their session.
BDU:2023-01003
Уязвимость межсетевого экрана веб-приложений FortiWeb, связанная с недостатком механизма фиксации сеанса, позволяющая нарушителю осуществить перехват сеансов других пользователей
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-42761 A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3.16, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 through 6.0.7, 5.9.0 through 5.9.1 may allow a remote, unauthenticated attacker to infer the session identifier of other users and possibly usurp their session. | CVSS3: 9 | 2% Низкий | почти 3 года назад |
| GHSA-hxmr-8629-frhp A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3.16, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 through 6.0.7, 5.9.0 through 5.9.1 may allow a remote, unauthenticated attacker to infer the session identifier of other users and possibly usurp their session. | CVSS3: 9.8 | 2% Низкий | почти 3 года назад |
 | BDU:2023-01003 Уязвимость межсетевого экрана веб-приложений FortiWeb, связанная с недостатком механизма фиксации сеанса, позволяющая нарушителю осуществить перехват сеансов других пользователей | CVSS3: 9.8 | 2% Низкий | почти 3 года назад |
Уязвимостей на страницу