Search Vulnerabilities

Idle session timeout is not configured for multiple open ports

HCL BigFix IVR is impacted by an insufficient session expiration vulnerability

Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced

KZTech JT3500V 4G LTE CPE 2.0.1 Insufficient Session Expiration Vulnerability

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerability

HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Insufficient Session Expiration vulnerability

An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7

OrangeHRM is Vulnerable to Persistent Session Access Due to Missing Invalidation After User Disable and Password Change

OpenObserve's Invite Token Lifecycle Misconfiguration

Kiteworks MFT is vulnerable to Insufficient Session Expiration

authentik invitation expiry is delayed by at least 5 minutes

HCL DevOps Loop is susceptible to an improper authentication vulnerability

HIJACKING OF THE TOKEN AND GAINING ACCESS

Nagios XI < 2024R1.1.3 Session Not Invalidated After Password Change

Nagios Fusion < R2.1 2FA Lack of Re-Authentication or Session Rotation

On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same chann...

PILOS is missing session regeneration after password change

Keycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removed

Keycloak-server: too long and not settings compliant session