CVE-2022-30277

MEDIUM Year: 2022
CVSS v3 Score
5.7
Medium
CVSS v2 Score
3.6
Low
Weakness Type
CWE-613
View all →

Vulnerability Description

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).

Related Vulnerabilities

CVE-2017-14007

MEDIUM
CVSS:5.6(Medium)

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing ...

CWE-6132017

CVE-2017-1693

MEDIUM
CVSS:5.6(Medium)

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134...

CWE-6132017

CVE-2019-14826

MEDIUM
CVSS:5.6(Medium)

A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can...

CWE-6132019

CVE-2021-21031

MEDIUM
CVSS:5.6(Medium)

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation could lead to unauthorized access to restricted...

CWE-6132021

CVE-2021-21032

MEDIUM
CVSS:5.6(Medium)

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation of this issue could lead to unauthorized access...

CWE-6132021

CVE-2021-38986

MEDIUM
CVSS:5.6(Medium)

IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 212942.

CWE-6132021