Falhas do tipo CWE-384

253 resultados

Fixação de Sessão

Fraqueza onde um atacante força a vítima a usar um identificador de sessão conhecido e controlado pelo atacante, em vez de receber um novo ID gerado pela aplicação. Após a vítima autenticar-se, o atacante reutiliza esse ID fixo para acessar a conta com os privilégios da vítima.

Exemplo

Um site envia um cookie de sessão (ex: SESSID=abc123) antes do login. O atacante convence a vítima a acessar um link contendo esse SESSID=abc123, depois que a vítima faz login, o atacante usa o mesmo cookie para acessar a conta autenticada da vítima.

Como mitigar

Gere sempre um novo ID de sessão após autenticação bem-sucedida, descartando qualquer ID anterior. Valide e resete a sessão no servidor a cada mudança de privilégio (login/logout). Use flags seguras no cookie: HttpOnly, Secure e SameSite.

CVE-2010-1434—Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain accesEPSS 0.9%CVE-2022-24781HIGHMalicious users can take over the session of other playersEPSS 0.9%CVE-2018-16495—In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not changed after the user sucEPSS 0.9%CVE-2022-38628MEDIUMNortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-sEPSS 0.9%CVE-2019-3783HIGHCloud Foundry Stratos Deploys With Public Default Session Store SecretEPSS 0.9%CVE-2021-41246MEDIUMSession fixation in express-openid-connectEPSS 0.9%CVE-2022-3269MEDIUMSession Fixation in ikus060/rdiffwebEPSS 0.9%CVE-2022-31689CRITICALVMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token maEPSS 0.9%CVE-2021-32710MEDIUMPotential Session Hijacking in ShopwareEPSS 0.9%CVE-2022-2997MEDIUMSession Fixation in snipe/snipe-itEPSS 0.9%CVE-2023-42322CRITICALInsecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information.EPSS 0.9%CVE-2025-55668MEDIUMApache Tomcat: session fixation via rewrite valveEPSS 0.9%CVE-2022-44007HIGHAn issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is possible for an attackeEPSS 0.9%CVE-2024-7341HIGHWildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adaptersEPSS 0.8%CVE-2021-22927—A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow aEPSS 0.8%CVE-2024-23679CRITICALEnonic XP Session Fixation VulnerabilityEPSS 0.8%CVE-2022-40916CRITICALTiny File Manager v2.4.7 and below is vulnerable to session fixation.EPSS 0.8%CVE-2020-5290MEDIUMsession fixation in rCTFEPSS 0.8%CVE-2020-6302MEDIUMSAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially. AEPSS 0.8%CVE-2018-16463—A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access tEPSS 0.8%