PT-2024-22883 · Cskefu · Cskefu

·

CVE-2024-29402

·

Published

2024-04-16

·

Updated

2024-11-07

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions cskefu version 7
Description The issue is related to Insufficient Session Expiration, which allows attackers to exploit old sessions for malicious activity.
Recommendations For cskefu version 7, consider implementing proper session expiration mechanisms to prevent the exploitation of old sessions. As a temporary workaround, restrict access to sensitive areas of the application that rely on session-based authentication until a proper fix is applied.

Fix

Insufficient Session Expiration

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-29402

Affected Products

Cskefu