Lucene search
Veracode Vulnerability DatabaseVERACODE:34892HistoryMar 31, 2022 - 8:24 a.m.
Business Logic Errors
2022-03-3108:24:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
31.9%
snipe/snipe-it is vulnerable to business logic errors. The vulnerability exists in the handle function of Authenticate.php because login enable does not block the old session which allows a malicious user to exploit the flaw and leak data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| snipe/snipe-it | le | v5.4.1 | |
| snipe/snipe-it | le | v5.4.1 |
Related
huntr
huntr
Old sessions are not blocked by the login enable function.
2022-03-25 08:04:38
osv
osv
CVE-2022-1155
2022-03-30 13:15:07
Old sessions not blocked by login enable function in Snipe-IT
2022-03-31 00:00:22
cve
cve
CVE-2022-1155
2022-03-30 13:15:07
cvelist
cvelist
prion
prion
Code injection
2022-03-30 13:15:00
github
github
Old sessions not blocked by login enable function in Snipe-IT
2022-03-31 00:00:22
nvd
nvd
CVE-2022-1155
2022-03-30 13:15:07