Session Management Vulnerability in Plone CMS by Plone Foundation
CVE-2008-1395

Currently unrated

Key Information:

Vendor

Plone

Status
Plone Cms
Vendor
CVE Published:
20 March 2008

What is CVE-2008-1395?

Plone CMS lacks proper recording of users' authentication states and relies on client-side logout functionality, allowing potential attackers to exploit logged-out sessions. This can lead to unauthorized access by reusing prior sessions, posing significant risks to user data and overall application security.

References

http://securityreason.com/securityalert/3754
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/489544/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/41423
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.