CWE-613
Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."
576 vulnerabilities with CWE-613
CVE-2020-3188
MEDIUM
Cisco Firepower Threat Defense - DoS
CVSS 5.3
CVE-2020-10876
HIGH
OKLOK 3.1.1 - Insufficient Session Expiration via Verification Code Brute Force
CVSS 7.5
CVE-2020-9482
MEDIUM
Apache NiFi Registry 0.1.0-0.5.0 - Insufficient Session Expiration
CVSS 6.5
CVE-2020-1762
HIGH
Kiali 0.4.0-1.15.0 - Insufficient Session Expiration via JWT Validation Bypass
CVSS 7.0
CVE-2020-8867
HIGH
OPC Foundation UA .NET Standard 1.04.358.30 - DoS
CVSS 7.5
CVE-2020-11795
HIGH
JetBrains Space through 2020-04-22 - Insufficient Session Expiration
CVSS 7.5
CVE-2020-11688
HIGH
JetBrains TeamCity < 2019.2.1 - Insufficient Session Expiration
CVSS 7.5
CVE-2020-4284
MEDIUM
IBM Security Information Queue 1.0.0-1.0.5 - Information Disclosure via Insufficient Session Expiration
CVSS 5.3
CVE-2020-4253
HIGH
IBM Content Navigator 3.0CD - Insufficient Session Expiration
CVSS 8.8
CVE-2020-6197
LOW
SAP Enable Now <1908 - Info Disclosure
CVSS 3.3
CVE-2020-1768
MEDIUM
OTRS 7.0.0-7.0.14 - Insufficient Session Expiration via Background Requests
CVSS 5.4
CVE-2020-0621
MEDIUM
Windows 10 and Windows Server 2016/2019 - Security Feature Bypass via Third-Party Filter During Password Update
CVSS 4.4
CVE-2019-5641
LOW
Rapid7 InsightVM < 6.6.160 - Information Exposure via Insufficient Session Expiration
CVSS 3.3
CVE-2019-3867
MEDIUM
Red Hat Quay 2 and 3 - Insufficient Session Expiration
CVSS 4.1
CVE-2019-19199
HIGH
REDDOXX MailDepot <2.2.1242 - Info Disclosure
CVSS 7.4
CVE-2019-12001
MEDIUM
HPE MSA 1040/1050/2040/2042/2050/2052 < GL225P001 - Remote Session Reuse and Access Bypass
CVSS 6.4
CVE-2019-5462
HIGH
GitLab 9.0.0-11.11.7 - Insufficient Session Expiration via Trigger Token Rotation
CVSS 8.8
CVE-2019-5647
MEDIUM
Rapid7 AppSpider < 3.8.213 - Insufficient Session Expiration in Chrome Plugin
CVSS 4.4
CVE-2019-10229
HIGH
MailStore Server 9.x-11.x < 11.2.2 - Insufficient Session Expiration via Generic LDAP Authentication
CVSS 8.8
CVE-2019-11106
MEDIUM
Intel CSME and TXE Firmware - Insufficient Session Expiration
CVSS 6.7
CVE-2019-8803
HIGH
iPadOS < 13.2 - Insufficient Session Expiration
CVSS 8.4
CVE-2019-12421
HIGH
Apache NiFi 1.0.0-1.9.2 - Insufficient Session Expiration via Logout
CVSS 8.8
CVE-2019-8149
CRITICAL
Magento 2.2-2.2.9 and 2.3-2.3.2 - Insecure Session Management
CVSS 9.8
CVE-2019-17375
HIGH
cPanel 81.9999.242-82.0.15 - Insufficient Session Expiration
CVSS 8.8
CVE-2019-9269
HIGH
Android 10 - Local Permissions Bypass via Cached Linux User ID
CVSS 7.3
Details
Vulnerabilities
576