CVE-2020-35358 - DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability

Back Back to CVE browser

CRITICAL

DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability

Published Mar 15, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 2.43%

Description

DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access to some system data or functionality.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-613

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23034
Advisory
https://gist.github.com/anku-agar/0fec2ffd98308e550ce9b5d4b395d0d7
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23034		Advisory
https://gist.github.com/anku-agar/0fec2ffd98308e550ce9b5d4b395d0d7		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 15, 2021

Updated Aug 4, 2024

Reserved Dec 14, 2020

Link CVE-2020-35358

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-35358

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 15, 2021

Updated Aug 4, 2024

Link EUVD-2020-23034

GitHub

No data