Lucene search
PRIOn knowledge basePRION:CVE-2023-37504HistoryOct 19, 2023 - 1:15 a.m.
Design/Logic Flaw
2023-10-1901:15:00
PRIOn knowledge base
www.prio-n.com
6
hcl compass
session
invalidation
vulnerability
impersonation
nvd
HCL Compass is vulnerable to failure to invalidate sessions. The application does not invalidate authenticated sessions when the log out functionality is called. If the session identifier can be discovered, it could be replayed to the application and used to impersonate the user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hcl_compass | ge | 2.0.0 | |
| hcl_compass | le | 2.0.3 | |
| hcl_compass | eq | 2.1.0 | |
| hcl_compass | ge | 2.2.0 | |
| hcl_compass | lt | 2.2.3 |
Related
cnvd
cnvd
HCL Technologies Compass Access Control Error Vulnerability
2023-10-23 00:00:00
cve
cve
CVE-2023-37504
2023-10-19 01:15:08
cvelist
cvelist
nvd
nvd
CVE-2023-37504
2023-10-19 01:15:08