Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25205
HistoryMay 08, 2020 - 5:35 a.m.

Improper Session Management

2020-05-0805:35:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.003

Percentile

68.0%

sorcery uses an improper session management. The vulnerability allows brute force attack to be carried out on the password authentication since the expired protection is not re-enabled after the first lockout period.

EPSS

0.003

Percentile

68.0%