CWE-613

Insufficient Session Expiration

Parent: CWE-672 - Operation on a Resource after Expiration or Release

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

531 vulnerabilities with CWE-613
CVE-2023-38489 HIGH
Kirby <3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 - Info Disclosure
CVSS 7.3
CVE-2023-37919 MEDIUM
Cal.com < 3.1.4 - Insufficient Session Expiration after 2FA Enablement
CVSS 6.5
CVE-2023-28001 MEDIUM
FortiOS 7.0.0-7.0.12 and 7.2.0-7.2.4 - Insufficient Session Expiration via REST API
CVSS 4.1
CVE-2023-36252 HIGH
Ateme Flamingo XL/XS <3.6.20/3.6.5 - RCE, DoS
CVSS 8.8
CVE-2023-35857 CRITICAL
Siren Investigate < 13.2.2 - Insufficient Session Expiration
CVSS 9.8
CVE-2023-2788 MEDIUM
Mattermost 7.1.0-7.1.8 - Authenticated Missing Authorization via OAuth2 Flow
CVSS 6.2
CVE-2023-0041 MEDIUM
IBM Security Guardium 11.5 - Privilege Escalation
CVSS 6.3
CVE-2023-32318 HIGH
Nextcloud Server - Insufficient Session Expiration via Text App Session Handling
CVSS 7.2
CVE-2023-31065 CRITICAL
Apache InLong <1.7.0 - Info Disclosure
CVSS 9.1
CVE-2023-33005 MEDIUM
Jenkins WSO2 Oauth Plugin < 1.0 - Insufficient Session Expiration
CVSS 5.4
CVE-2023-31139 MEDIUM
DHIS2 Core <2.37.9.1-2.39.1.2 - Auth Bypass
CVSS 4.3
CVE-2023-31140 MEDIUM
OpenProject <12.5.4 - Info Disclosure
CVSS 4.8
CVE-2023-30403 HIGH
Aigital Wireless-N Repeater Mini Router Firmware v0.131229 - Insufficient Session Expiration
CVSS 7.5
CVE-2023-28003 MEDIUM
EcoStruxure Power Monitoring Expert < 2022 - Insufficient Session Expiration
CVSS 6.7
CVE-2023-1788 CRITICAL
GitHub firefly-iii <6 - Info Disclosure
CVSS 9.8
CVE-2023-1854 MEDIUM
SourceCodester Online Graduate Tracer System 1.0 - Info Disclosure
CVSS 4.7
CVE-2023-20903 MEDIUM
Cloudfoundry User Account And Authent... - Insufficient Session Expiration
CVSS 4.3
CVE-2023-1543 HIGH
GitHub answerdev/answer <1.0.6 - Info Disclosure
CVSS 8.8
CVE-2023-22591 LOW
IBM Robotic Process Automation 21.0.1-21.0.7 and 23.0.0-23.0.1 - Insufficient Session Expiration
CVSS 3.9
CVE-2023-27891 HIGH
pretix < 4.17.1 - Insufficient Session Expiration
CVSS 7.5
CVE-2023-23929 HIGH
vantage6 < 3.8.0 - Insufficient Session Expiration
CVSS 8.8
CVE-2023-22771 MEDIUM
ArubaOS 8.6.0.0-8.6.0.18 & SD-WAN 8.7.0.0-2.3.0.0-8.7.0.0-2.3.0.7 CLI Session Expiration Issue
CVSS 6.8
CVE-2023-25562 MEDIUM
DataHub < 0.8.45 - Authentication Bypass via Insufficient Session Expiration
CVSS 6.9
CVE-2023-24426 HIGH
Jenkins Azure AD Plugin <303.va_91ef20ee49f - Auth Bypass
CVSS 8.8
CVE-2023-23614 HIGH
Pi-hole Web Interface 4.0-5.18.2 - Insufficient Session Expiration via Remember Me Cookie
CVSS 8.8
Details
Vulnerabilities 531
Links
MITRE CWE Entry Search this CWE With Exploits