CVE

Id
36839  
CVE No.
CVE-2008-6722  
Status
Candidate  
Description
Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim"s web-browser process that continues to send the original and valid SSL sessionID, related to inability of Apache Tomcat to clear entries from its SSL cache.  
Phase
Assigned (20090414)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401219 36839 CVE-2008-6722 CONFIRM:http://www.novell.com/support/viewContent.do?externalId=7001788  View
401220 36839 CVE-2008-6722 BID:32121  View
401221 36839 CVE-2008-6722 URL:http://www.securityfocus.com/bid/32121  View
401222 36839 CVE-2008-6722 OSVDB:49737  View
401223 36839 CVE-2008-6722 URL:http://osvdb.org/49737  View
401224 36839 CVE-2008-6722 SECUNIA:32554  View
401225 36839 CVE-2008-6722 URL:http://secunia.com/advisories/32554  View
401226 36839 CVE-2008-6722 VUPEN:ADV-2008-3012  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41996 JVNDB-2009-003003 CMScout におけるディレクトリトラバーサルの脆弱性 CMScout には、register_globals が有効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-6726 36839 6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003003.html  View