NVD

Id
42072  
Name
CVE-2013-7347  
Description
Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the __ac session cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2012-3359 for the base64-encoded storage of the user and password in a cookie.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-03-31  
Modified Date
2014-03-31  
Seq
2013-7347  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212351 42072 CVE-2013-7347 RHSA-2013:0128  View
212352 42072 CVE-2013-7347 https://bugzilla.redhat.com/show_bug.cgi?id=607179  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24700 JVNDB-2013-006275 Red Hat Conga の Luci におけるセッションへのアクセス権を取得される脆弱性 Red Hat Conga の Luci は、ユーザのセッションタイムアウトを適切に処理しないため、セッションへのアクセス権を取得される脆弱性が存在します。 CVE-2013-7347 67289 CVE-2013-7347 42072 3.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006275.html 2013-01-08 2014-04-02 View