CVE Vulnerabilities

CVE-2022-41542

Insufficient Session Expiration

Published: Oct 17, 2022 | Modified: Nov 07, 2023
CVSS 3.x
5.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

devhub 0.102.0 was discovered to contain a broken session control.

Weakness

According to WASC, “Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.”

Affected Software

Name Vendor Start Version End Version
Devhub Devhubapp 0.102.0 (including) 0.102.0 (including)

Potential Mitigations

References