CVE-2018-16495
CVE-2018-16495
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
26 mai 2021Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not changed after the user successfully logs into the application. Failing to issue a new session ID following a successful login introduces the possibility for an attacker to set up a trap session on the device the victim is likely to login with.
Produtos afetados
n/a · Versa VOSQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
https://hackerone.com/reports/1168192