Session Management Vulnerability in Plone CMS by Plone Foundation
CVE-2008-1395

Currently unrated

Key Information:

Vendor: Plone
Status: Plone Cms
Vendor: CVE Published:; 20 March 2008

What is CVE-2008-1395?

Plone CMS lacks proper recording of users' authentication states and relies on client-side logout functionality, allowing potential attackers to exploit logged-out sessions. This can lead to unauthorized access by reusing prior sessions, posing significant risks to user data and overall application security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch