CVE-2019-5638 — Insufficient Session Expiration

Vendor	Product	Version range	Fixed in
rapid7	insightvm	< 6.5.50	6.5.50
rapid7	insightvm	< 6.5.50	6.5.50
rapid7	nexpose	<= 6.5.50	—

GHSA

GHSA-xwrh-gfhf-9mw4: Rapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user

ghsa_unreviewed·2023-03-24·CVSS 8.7

CVE-2021-3844 [HIGH] CWE-613 GHSA-xwrh-gfhf-9mw4: Rapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user Rapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user account's current session is still valid after the password change, potentially allowing the attacker who originally compromised the credential to remain logged in and able to cause further damage. This vulnerability is mitigated by the use of the Platform Login feature. This issue is related to CVE-2019-5638.

GHSA

GHSA-8pp6-343g-mgj6: Rapid7 Nexpose versions 6

ghsa_unreviewed·2022-05-24

CVE-2019-5638 [HIGH] CWE-613 GHSA-8pp6-343g-mgj6: Rapid7 Nexpose versions 6 Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user account's current session is still valid after the password change, potentially allowing the attacker who originally compromised the credential to remain logged in and able to cause further damage.

Red Hat

struts2: RCE when performing file upload based on Jakarta Multipart parser

vendor_redhat·2017-03-06·CVSS 9.8

CVE-2017-5638 [CRITICAL] CWE-20 struts2: RCE when performing file upload based on Jakarta Multipart parser struts2: RCE when performing file upload based on Jakarta Multipart parser The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string. A flaw was reported in Apache Struts 2 that could allow an attacker to perform remote code execution with a malicious Content-Type value. Statement: A previous statement by Red Hat related to this CVE, prior to August 2019, said that Apache Struts 2 is not included in any Red Hat products. This earlier

CVE-2019-5638: Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing…

Affected

CVSS provenance