NVD

Id
6453  
Name
CVE-2008-6722  
Description
Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim"s web-browser process that continues to send the original and valid SSL sessionID, related to inability of Apache Tomcat to clear entries from its SSL cache.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2009-04-14  
Modified Date
2009-04-29  
Seq
2008-6722  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
37608 6453 CVE-2008-6722 http://www.novell.com/support/viewContent.do?externalId=7001788  View
37609 6453 CVE-2008-6722 32121  View
37610 6453 CVE-2008-6722 ADV-2008-3012  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49928 JVNDB-2008-005238 Novell Access Manager におけるログインセッションを取得される脆弱性 Novell Access Manager は、X.509 証明書のセッションを適切に失効しない、および Apache Tomcat が SSL キャッシュからエントリクリア不能に関する不備があるため、ログインセッションを取得される脆弱性が存在します。 CVE-2008-6722 36835 CVE-2008-6722 6453 1.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005238.html 2008-11-04 2012-09-25 View