Fallos del tipo CWE-384

253 resultados

Fixação de sessão

Ocorre quando a aplicação não regenera o ID da sessão após autenticação bem-sucedida, permitindo que um atacante force um usuário a usar um ID de sessão pré-conhecido. Depois que a vítima se autentica nessa sessão comprometida, o atacante consegue acessar a conta usando o ID que já controla.

Ejemplo

Um atacante envia ao usuário um link com um ID de sessão fixo (ex: PHPSESSID=abc123). A vítima clica, faz login normalmente, mas o servidor nunca muda o ID. Agora o atacante usa a mesma sessão para acessar a conta autenticada, roubando dados ou fazendo transações.

Cómo mitigar

Regenere o ID da sessão imediatamente após login bem-sucedido, descarte o ID antigo, e use um algoritmo criptograficamente forte para gerar novos IDs. Além disso, valide o IP/User-Agent da sessão e implemente timeout de inatividade.

CVE-2010-1434—Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain accesEPSS 0.9%CVE-2022-24781HIGHMalicious users can take over the session of other playersEPSS 0.9%CVE-2018-16495—In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not changed after the user sucEPSS 0.9%CVE-2022-38628MEDIUMNortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-sEPSS 0.9%CVE-2019-3783HIGHCloud Foundry Stratos Deploys With Public Default Session Store SecretEPSS 0.9%CVE-2021-41246MEDIUMSession fixation in express-openid-connectEPSS 0.9%CVE-2022-3269MEDIUMSession Fixation in ikus060/rdiffwebEPSS 0.9%CVE-2022-31689CRITICALVMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token maEPSS 0.9%CVE-2021-32710MEDIUMPotential Session Hijacking in ShopwareEPSS 0.9%CVE-2022-2997MEDIUMSession Fixation in snipe/snipe-itEPSS 0.9%CVE-2023-42322CRITICALInsecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information.EPSS 0.9%CVE-2025-55668MEDIUMApache Tomcat: session fixation via rewrite valveEPSS 0.9%CVE-2022-44007HIGHAn issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is possible for an attackeEPSS 0.9%CVE-2024-7341HIGHWildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adaptersEPSS 0.8%CVE-2021-22927—A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow aEPSS 0.8%CVE-2024-23679CRITICALEnonic XP Session Fixation VulnerabilityEPSS 0.8%CVE-2022-40916CRITICALTiny File Manager v2.4.7 and below is vulnerable to session fixation.EPSS 0.8%CVE-2020-5290MEDIUMsession fixation in rCTFEPSS 0.8%CVE-2020-6302MEDIUMSAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially. AEPSS 0.8%CVE-2018-16463—A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access tEPSS 0.8%