Fallos del tipo CWE-613

427 resultados

Expiração de Sessão Inadequada

A aplicação não valida ou reforça corretamente o tempo de vida de uma sessão de usuário, permitindo que sessões expiradas ou mal gerenciadas continuem sendo aceitas. Isso abre brecha para roubo de sessão, fixação de sessão ou acesso não autorizado após logout.

Ejemplo

Um usuário faz login em um banco online e recebe um token de sessão. A aplicação não verifica se o token expirou no servidor, então mesmo após 24 horas de inatividade, aquele token continua funcional — um atacante que capturar o token pode acessar a conta indefinidamente.

Cómo mitigar

Implemente timeout rigoroso no servidor (revogue tokens expirados), valide a expiração a cada requisição, use session store confiável (Redis, BD), regenere IDs após login/logout, e considere tokens com TTL curto ou refresh tokens com rotação automática.

CVE-2023-30403HIGHAn issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to bypass EPSS 13.8%CVE-2020-8234—A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be gEPSS 3.4%CVE-2016-6545—iTrack Easy does not use session cookies to maintain sessions and POSTs the users password over HTTPS for each requestEPSS 3.1%CVE-2024-48827HIGHAn issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password funEPSS 2.8%CVE-2017-12159—It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain acEPSS 2.7%CVE-2021-25981CRITICALTalkyard - Insufficient Session ExpirationEPSS 2.5%CVE-2013-0335HIGHOpenstack nova: vnc proxy can connect to the wrong vmEPSS 2.1%CVE-2021-39113HIGHAffected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after loEPSS 1.8%CVE-2021-21031MEDIUMMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized AccessEPSS 1.7%CVE-2022-3080HIGHBIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedlyEPSS 1.6%CVE-2021-34739HIGHCisco Small Business Series Switches Session Credentials Replay VulnerabilityEPSS 1.6%CVE-2021-25992CRITICALifme - Insufficient Session ExpirationEPSS 1.6%CVE-2021-21032MEDIUMMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized AccessEPSS 1.6%CVE-2024-0944LOWTotolink T8 cstecgi.cgi session expirationEPSS 1.5%CVE-2021-1501HIGHCisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software SIP Denial of Service VulnerabilityEPSS 1.3%CVE-2023-50270MEDIUMApache DolphinScheduler: Session do not expire after password changeEPSS 1.3%CVE-2022-41672—Session still functional after user is deactivatedEPSS 1.3%CVE-2021-25970HIGHCamaleon CMS - Insufficient Session Expiration after Password ChangeEPSS 1.3%CVE-2018-1127MEDIUMTendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain aEPSS 1.3%CVE-2022-24743HIGHInsufficient Session Expiration in SyliusEPSS 1.3%