CVE Vulnerabilities

CVE-2022-36179

Insufficient Session Expiration

Published: Nov 22, 2022 | Modified: Jul 10, 2023
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Fusiondirectory 1.3 suffers from Improper Session Handling.

Weakness

According to WASC, “Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.”

Affected Software

Name Vendor Start Version End Version
Fusiondirectory Fusiondirectory 1.3 (including) 1.3 (including)

Potential Mitigations

References