Skip to contentCWE-613 vulnerabilities
- ibm security directory integrator, security verify directory integrator, security directory server +1 more +3 moreIBM Security Directory Server information disclosureCVE-2022-327595.3 Medium
- apache streamparkApache StreamPark: session not invalidated after logoutCVE-2024-290709.1 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or...CVE-2024-418277.4 High
- fortinet fortiaiopsMultiple insufficient session expiration vulnerabilities [CWE-613] in FortiAIOps version 2.0.0...CVE-2024-277827.7 High
- suse rancherRancher does not automatically clean up a user deleted or disabled from the configured Authentication ProviderCVE-2023-22650Fix available8.7 High
- scshr hr portalSoar Cloud HR Portal - Insufficient Session ExpirationCVE-2024-59958.8 High
- wvp gb28181 pro, wvp-pro gb28181 +1 moreAn access control issue in Wvp GB28181 Pro 2.0 allows users to continue to access information in...CVE-2024-365236.5 Medium
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...CVE-2024-352068.5 High
- zenml, zenml-io zenml-io/zenml +1 moreInsufficient Session Expiration in zenml-io/zenmlCVE-2024-46803.9 Low
zfr/zfr-oauth2-server-module Packagistzfr authentication adapter did not verify validity of tokensGHSA-rcm4-jv5g-wccmFix available7.5 High- kde plasma-workspaceKSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1...CVE-2024-36041Fix available7.8 High
silverstripe/framework Packagistsilverstripe/framework's pre-existing alc_enc cookies log users in if remember me is disabledGHSA-5r8w-66hq-rc39Fix available3.1 Low- fastify session@fastify/session reuses destroyed session cookieCVE-2024-35220Fix available7.4 High
- reporticoReportico Web fails to invalidate cookies upon logoutCVE-2024-315567.8 High
- directusDirectus Lacks Session Tokens InvalidationCVE-2024-34709Fix available5.4 Medium
- surveykingAn issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID...CVE-2024-350508.8 High
- surveykingSurveyKing v1.3.1 was discovered to keep users' sessions active after logout. Related to an...CVE-2024-350499.1 Critical
- javahuang surveykingAn issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user...CVE-2024-350484.3 Medium
- archerirm archerAn issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled...CVE-2024-340928.8 High
- ibm cognos controllerIBM Cognos Controller session fixationCVE-2023-406956.3 Medium
- redhat keycloak, red hat build of keycloak 22, build of keycloak 22.0.10 +2 more +4 moreKeycloak: session hijacking via re-authenticationCVE-2023-6787Fix available6.5 Medium
- No product listedcskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old...CVE-2024-294024.3 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy session fixationCVE-2024-223586.3 Medium
- digitalbazaar zcapzcap has incomplete expiration checks in capability chains.CVE-2024-31995Fix available4.3 Medium
- fastify fastify-secure-session@fastify/secure-session: Reuse of destroyed secure session cookieCVE-2024-31999Fix available7.4 High
- contaoContao's remember-me tokens will not be cleared after a password changeCVE-2024-30262Fix available5.9 Medium
- shopwareShopware has Improper Session Handling in store-apiCVE-2024-31447Fix available5.3 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session...CVE-2024-259545.3 Medium
- mindskip xzs-mysqlxzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the...CVE-2024-294019.8 Critical
- sagemcom fast3686 v2 vodafone, f\@st 3686 firmware +1 moreInsufficient session timeout vulnerability in Sagemcom routerCVE-2024-16237.7 High
- cisco duo, duo authentication for windows logon and rdp +1 moreA vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an...CVE-2024-203016.2 Medium
- devolutions serverImproper session management in the identity provider authentication flow in Devolutions Server...CVE-2024-19005.5 Medium
- ailux imx6, imx6 bundle +1 moreA CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the...CVE-2023-456005.6 Medium
- linksys e1700 firmwareAn issue was discovered in Linksys Router E1700 1.0.04 (build 3), allows authenticated attackers...CVE-2024-225436.1 Medium
- bentley assetwise alim web, assetwise information integrity server +1 moreIn the Bentley ALIM Web application, certain configuration settings can cause exposure of a user...CVE-2024-274559.1 Critical
- joomla joomla\!, joomla! project cms +1 more[20240201] - Core - Insufficient session expiration in MFA management viewsCVE-2024-21722Fix available6.3 Medium
- apache dolphinschedulerApache DolphinScheduler: Session do not expire after password changeCVE-2023-50270Fix available6.5 Medium
- authcrunch caddy-securityInsufficient Session Expiration in github.com/greenpau/caddy-securityCVE-2024-214924.8 Medium
- alf, alfio-event alf.io +1 moreInsufficient Session Expiration in alf.ioCVE-2024-256287.6 High
- joinmastodon mastodonDestroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodonCVE-2024-25619Fix available3.1 Low
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Insufficient Session Expiration Vulnerability in the Web InterfaceCVE-2024-00086.6 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreBIG-IP iControl REST API VulnerabilityCVE-2024-223897.2 High
- dropbox samly, samly elixr +1 moreSamly access control vulnerabilityCVE-2024-25718Fix available9.8 Critical
- hcl software sametimeHCL Sametime is impacted by a failure to invalidate sessionsCVE-2023-457183.9 Low
- ibm engineering lifecycle optimization - publishing, engineering lifecycle optimization +1 moreIBM Engineering Lifecycle Optimization - Publishing session fixationCVE-2023-451876.3 Medium
- ibm powerscIBM PowerSC session fixationCVE-2023-509366.3 Medium
- totolink t8, t8 firmware +1 moreTotolink T8 cstecgi.cgi session expirationCVE-2024-09443.7 Low
- totolink n350rt, n350rt firmware +1 moreTotolink N350RT cstecgi.cgi session expirationCVE-2024-09433.7 Low
- totolink n200re v5, n200re-v5 firmware +1 moreTotolink N200RE V5 cstecgi.cgi session expirationCVE-2024-09423.7 Low
- nextcloud server, kiteworks security-advisories +1 moreOAuth2 authorization codes are valid indefinetly in Nextcloud serverCVE-2024-224033.0 Low
- Show moreLoading…