CWE-613
Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."
576 vulnerabilities with CWE-613
CVE-2023-0041
MEDIUM
IBM Security Guardium 11.5 - Privilege Escalation
CVSS 6.3
CVE-2023-32318
HIGH
Nextcloud Server - Insufficient Session Expiration via Text App Session Handling
CVSS 7.2
CVE-2023-31065
CRITICAL
Apache InLong <1.7.0 - Info Disclosure
CVSS 9.1
CVE-2023-33005
MEDIUM
Jenkins WSO2 Oauth Plugin < 1.0 - Insufficient Session Expiration
CVSS 5.4
CVE-2023-31139
MEDIUM
DHIS2 Core <2.37.9.1-2.39.1.2 - Auth Bypass
CVSS 4.3
CVE-2023-31140
MEDIUM
OpenProject <12.5.4 - Info Disclosure
CVSS 4.8
CVE-2023-30403
HIGH
Aigital Wireless-N Repeater Mini Router Firmware v0.131229 - Insufficient Session Expiration
CVSS 7.5
CVE-2023-28003
MEDIUM
EcoStruxure Power Monitoring Expert < 2022 - Insufficient Session Expiration
CVSS 6.7
CVE-2023-1788
CRITICAL
GitHub firefly-iii <6 - Info Disclosure
CVSS 9.8
CVE-2023-1854
MEDIUM
SourceCodester Online Graduate Tracer System 1.0 - Info Disclosure
CVSS 4.7
CVE-2023-20903
MEDIUM
Cloudfoundry User Account And Authent... - Insufficient Session Expiration
CVSS 4.3
CVE-2023-1543
HIGH
GitHub answerdev/answer <1.0.6 - Info Disclosure
CVSS 8.8
CVE-2023-22591
LOW
IBM Robotic Process Automation 21.0.1-21.0.7 and 23.0.0-23.0.1 - Insufficient Session Expiration
CVSS 3.9
CVE-2023-27891
HIGH
pretix < 4.17.1 - Insufficient Session Expiration
CVSS 7.5
CVE-2023-23929
HIGH
vantage6 < 3.8.0 - Insufficient Session Expiration
CVSS 8.8
CVE-2023-22771
MEDIUM
ArubaOS 8.6.0.0-8.6.0.18 & SD-WAN 8.7.0.0-2.3.0.0-8.7.0.0-2.3.0.7 CLI Session Expiration Issue
CVSS 6.8
CVE-2023-25562
MEDIUM
DataHub < 0.8.45 - Authentication Bypass via Insufficient Session Expiration
CVSS 6.9
CVE-2023-24426
HIGH
Jenkins Azure AD Plugin <303.va_91ef20ee49f - Auth Bypass
CVSS 8.8
CVE-2023-23614
HIGH
Pi-hole Web Interface 4.0-5.18.2 - Insufficient Session Expiration via Remember Me Cookie
CVSS 8.8
CVE-2023-22732
LOW
Shopware < 6.4.18.1 - Insufficient Session Expiration in Administration
CVSS 3.7
CVE-2023-0227
MEDIUM
pyload <0.5.0b3.dev36 - Info Disclosure
CVSS 6.5
CVE-2023-22492
MEDIUM
ZITADEL 2.0.0-2.16.3 and 2.17.0-2.17.2 - Insufficient Session Expiration via Refresh Token
CVSS 5.9
CVE-2022-50692
HIGH
SOUND4 IMPACT/FIRST/PULSE/Eco <2 - Info Disclosure
CVSS 7.5
CVE-2022-45862
LOW
FortiOS <7.2.6, FortiProxy <7.4.0, FortiSwitchManager <7.2.2, FortiPAM <1.4.0 - GUI Session Expiration Issue
CVSS 3.7
CVE-2022-38382
MEDIUM
IBM Cloud Pak for Security <1.10.11.0 & QRadar Suite Software <1.10...
CVSS 4.7
Details
Vulnerabilities
576