CVE-2022-25896

CVSS v3 Score
4.8
Medium
CVSS v2 Score
5.8
Medium

Vulnerability Description

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

CVSS:4.8(Medium)

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation.

CVSS:4.7(Medium)

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI....

CVSS:4.9(Medium)

Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if impersonation is disabled. This vulnerability is present in GitLab CE/EE versions befor...

CVSS:5.0(Medium)

IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced.

CVSS:4.6(Medium)

Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware version...

CVSS:4.6(Medium)

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.