Falhas do tipo CWE-384

232 resultados

Fixação de Sessão

Fraqueza onde um atacante força a vítima a usar um identificador de sessão conhecido e controlado pelo atacante, em vez de receber um novo ID gerado pela aplicação. Após a vítima autenticar-se, o atacante reutiliza esse ID fixo para acessar a conta com os privilégios da vítima.

Exemplo

Um site envia um cookie de sessão (ex: SESSID=abc123) antes do login. O atacante convence a vítima a acessar um link contendo esse SESSID=abc123, depois que a vítima faz login, o atacante usa o mesmo cookie para acessar a conta autenticada da vítima.

Como mitigar

Gere sempre um novo ID de sessão após autenticação bem-sucedida, descartando qualquer ID anterior. Valide e resete a sessão no servidor a cada mudança de privilégio (login/logout). Use flags seguras no cookie: HttpOnly, Secure e SameSite.

CVE-2025-51471MEDIUMCross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and EPSS 12.6%CVE-2025-52689CRITICALWeak Session ID Check in the OmniAccess Stellar Web Management InterfaceEPSS 11.5%CVE-2021-36394—In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.EPSS 7.0%CVE-2022-30605HIGHA privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-EPSS 4.2%CVE-2018-5385—Navarino Infinity web interface up to version 2.2 is prone to session fixation attacksEPSS 4.2%CVE-2018-0229—A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect EPSS 3.6%CVE-2016-9125—Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, byEPSS 2.7%CVE-2023-31498CRITICALA privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary codeEPSS 2.1%CVE-2019-10158MEDIUMA flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring SesEPSS 2.0%CVE-2018-8852—Philips e-Alert Unit (non-medical device), Version R2.1 and prior. When authenticating a user or otherwise establishing a new user session, EPSS 1.9%CVE-2022-38054—Session FixationEPSS 1.9%CVE-2025-28242CRITICALImproper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack.EPSS 1.8%CVE-2018-5465—A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform SwiEPSS 1.8%CVE-2016-8609LOWIt was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a EPSS 1.7%CVE-2019-1807HIGHCisco Umbrella Dashboard Session Management VulnerabilityEPSS 1.5%CVE-2021-42761HIGHA condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3.EPSS 1.5%CVE-2020-10714—A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in theEPSS 1.5%CVE-2020-25198HIGHMOXA NPort IAW5000A-I/O SeriesEPSS 1.4%CVE-2023-40273HIGHSession fixation in Apache Airflow web interfaceEPSS 1.4%CVE-2023-50270MEDIUMApache DolphinScheduler: Session do not expire after password changeEPSS 1.3%