Lucene search
Veracode Vulnerability DatabaseVERACODE:33529HistoryJan 06, 2022 - 4:17 a.m.
Insecure Session Management
2022-01-0604:17:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
42.3%
shopware/shopware uses an insecure session management. The library does not invalidate session tokens after the user password change, allowing an attacker to gain access to the system if an old session token was obtained.
| CPE | Name | Operator | Version |
|---|---|---|---|
| shopware/shopware | le | v5.7.6 | |
| shopware/shopware | le | v5.7.6 |
Related
cve
cve
CVE-2022-21652
2022-01-05 20:15:08
cnvd
cnvd
Shopware Trust Management Issue Vulnerability
2022-01-06 00:00:00
prion
prion
Design/Logic Flaw
2022-01-05 20:15:00
github
github
Insufficient Session Expiration in shopware
2022-01-06 23:49:17
osv
osv
Insufficient Session Expiration in shopware
2022-01-06 23:49:17
nvd
nvd
CVE-2022-21652
2022-01-05 20:15:08
cvelist
cvelist
CVE-2022-21652 Insufficient Session Expiration in shopware
2022-01-05 19:20:18