CWE-613 Archives - CVE Vulnerability

CVE-2018-7758

Sun, 26 Feb 2023 06:51:09 +0000

A denial of service vulnerability exists in Schneider Electric’s MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.

The post CVE-2018-7758 appeared first on CVE Vulnerability.

CVE-2018-6634

Sun, 26 Feb 2023 06:50:47 +0000

A vulnerability in Parsec Windows 142-0 and Parsec ‘Linux Ubuntu 16.04 LTS Desktop’ Build 142-1 allows unauthorized users to maintain access to an account.

The post CVE-2018-6634 appeared first on CVE Vulnerability.

CVE-2018-5438

Sun, 26 Feb 2023 06:50:20 +0000

Philips ISCV application prior to version 2.3.0 has an insufficient session expiration vulnerability where an attacker could reuse the session of a previously logged in user. This vulnerability exists when using ISCV together with an Electronic Medical Record (EMR) system, where ISCV is in KIOSK mode for multiple users and using Windows authentication. This may allow an attacker to gain unauthorized access to patient health information and potentially modify this information.

The post CVE-2018-5438 appeared first on CVE Vulnerability.

CVE-2018-2451

Sun, 26 Feb 2023 06:49:02 +0000

XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding authorizations have been revoked meanwhile by an administrator user. Similarly, an attacker who managed to gain access to the platform user’s session might misuse the session token even after the session has been closed.

The post CVE-2018-2451 appeared first on CVE Vulnerability.

CVE-2018-21018

Sun, 26 Feb 2023 06:48:50 +0000

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.

The post CVE-2018-21018 appeared first on CVE Vulnerability.

CVE-2018-14345

Sun, 26 Feb 2023 06:46:17 +0000

An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and helper/backend/PamBackend.cpp.

The post CVE-2018-14345 appeared first on CVE Vulnerability.

CVE-2018-1195

Sun, 26 Feb 2023 06:45:27 +0000

In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for authentication where access tokens are expected. This exposes a vulnerability where a refresh token that would otherwise be insufficient to obtain an access token, either due to lack of client credentials or revocation, would allow authentication.

The post CVE-2018-1195 appeared first on CVE Vulnerability.

CVE-2018-11386

Sun, 26 Feb 2023 06:45:13 +0000

An issue was discovered in the HttpFoundation component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. The PDOSessionHandler class allows storing sessions on a PDO connection. Under some configurations and with a well-crafted payload, it was possible to do a denial of service on a Symfony application without too much resources.

The post CVE-2018-11386 appeared first on CVE Vulnerability.

CVE-2018-10990

Sun, 26 Feb 2023 06:45:04 +0000

On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity of the “credential” cookie, which might make it easier for attackers to obtain access at a later time (e.g., “at least for a few minutes”). NOTE: there is no documentation stating that the web UI’s logout feature was supposed to do anything beyond removing the cookie from one instance of a web browser; a client-side logout action is often not intended to address cases where a person has made a copy of a cookie outside of a browser.

The post CVE-2018-10990 appeared first on CVE Vulnerability.

CVE-2018-1000814

Sun, 26 Feb 2023 06:44:40 +0000

aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value.

The post CVE-2018-1000814 appeared first on CVE Vulnerability.