CVE Vulnerabilities

CVE-2020-23136

Insufficient Session Expiration

Published: Nov 09, 2020 | Modified: Nov 21, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Microweber v1.1.18 is affected by no session expiry after log-out.

Weakness 

According to WASC, “Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.”

Affected Software 

Name Vendor Start Version End Version
Microweber Microweber 1.1.18 (including) 1.1.18 (including)

Potential Mitigations 

References