Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-13279 | Drupal Two-factor Authentication up to 1.7.x session fixiation


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability, which was classified as problematic, was found in Drupal Two-factor Authentication up to 1.7.x. This affects an unknown part. The manipulation leads to session fixiation. This vulnerability is uniquely identified as CVE-2024-13279. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2022-25896 | passport up to 0.5.x Session session fixiation


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-38054 | Apache Airflow up to 2.3.3 Webserver Session Backend session fixiation


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-38369 | Apache IoTDB 0.13.0 Session session fixiation


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-40226 | Siemens SICAM P850/SICAM P855 up to 3.9 Session Cookie session fixiation (ssa-572005)


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2782 | Octopus Server Session Token session fixiation


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-43398 | Siemens POWER METER SICAM Q100 prior 2.50 Session Cookie session fixiation (ssa-570294)


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31689 | VMware Workspace ONE Assist up to 22.9 Session Token session fixiation (VMSA-2022-0028)


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-18418 | ClonOS Web Control Panel 19.09 Session Management clonos.php session fixiation (ID 154986)


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-8149 | Magento up to 2.2.9/2.3.2 Session Management session fixiation


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-11173 | Intel Baseboard Management Controller Session session fixiation


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-9370 | Humax HGA12R-02 BRGCAA 1.1.53 Session session fixiation


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-11729 | DAViCal Andrew's Web Libraries up to 0.60 Session session fixiation (Bug 18)


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-11728 | DAViCal Andrew's Web Libraries up to 0.60 Session Management session fixiation (Bug 19)


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2014-9386 | Zenoss Core up to 3.0.1 Session session fixiation (VU#449452)


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-2296 | Requests up to 2.1.0 Session resolve_redirects session fixiation (USN-2531-1 / Nessus ID 81879)


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2013-7387 | Dleviet DataLife Engine up to 9.7 Session session fixiation (EDB-24444 / SA51971)


📈 34.86 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco FireSIGHT/Firepower Management Center bis 6.0 Session Handler Session Fixiation schwache Authentisierung


📈 34.04 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco FireSIGHT/Firepower Management Center bis 6.0 Session Handler Session Fixiation schwache Authentisierung


📈 34.04 Punkte
🕵️ Sicherheitslücken

🕵️ Revive Adserver bis 4.0.0 Session Session Fixiation schwache Authentisierung


📈 34.04 Punkte
🕵️ Sicherheitslücken

🕵️ Pi-Hole up to 5.0/5.1/5.1.1 Session Cookie session fixiation


📈 34.04 Punkte
🕵️ Sicherheitslücken

🕵️ CubeCart up to 6.4.2 Session Cookie session fixiation


📈 34.04 Punkte
🕵️ Sicherheitslücken

📰 Question about TLS/SSL session. So, on my PC, I had an active https session with my bank via mobile hotspot on my iPhone. I enabled VPN session on my iPhone, but the session on my PC did not break. Should it have?


📈 32.78 Punkte
📰 IT Security Nachrichten

🕵️ CVE-2021-36394 | Moodle Shibboleth Authentication Plugin session fixiation


📈 31.68 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50176 | Fortinet FortiOS up to 7.0.13/7.2.7/7.4.3 SAML Authentication Link session fixiation (FG-IR-23-475 / Nessus ID 210874)


📈 31.68 Punkte
🕵️ Sicherheitslücken

🕵️ aio-libs aiohttp-session Session Session Fixation weak authentication


📈 29.6 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2014-9015 | Drupal 6.33/7.33 Session access control (DRUPAL-SA-CORE-2014-006 / EDB-35415)


📈 28.99 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2014-9015 | Drupal 6.33/7.33 Session access control (DRUPAL-SA-CORE-2014-006 / EDB-35415)


📈 28.99 Punkte
🕵️ Sicherheitslücken

🕵️ SAP Disclosure Management 10.1 session fixiation [CVE-2020-6290]


📈 26.67 Punkte
🕵️ Sicherheitslücken

🕵️ IBM Cloud Pak for Security 1.3.0.1 session fixiation [CVE-2020-4696]


📈 26.67 Punkte
🕵️ Sicherheitslücken

🕵️ Versa VOS session fixiation [CVE-2018-16495]


📈 26.67 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-24444 | SilverStripe Framework up to 4.10.0 session fixiation


📈 26.67 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-22681 | Synology Photo Station prior 6.8.16-3506 session fixiation (SA_21_26)


📈 26.67 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-33927 | Dell Wyse Management Suite up to 3.6.1 session fixiation (dsa-2022-134)


📈 26.67 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-40958 | Mozilla Firefox up to 104 Cookie session fixiation (Bug 1779993)


📈 26.67 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2997 | Snipe-IT up to 6.0.9 session fixiation


📈 26.67 Punkte
🕵️ Sicherheitslücken

matomo
•