PT-2024-22883 · Cskefu · Cskefu

Lujiefsio · Published 2024-04-16 · Updated 2024-11-07 · CVE-2024-29402

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions cskefu version 7

Description The issue is related to Insufficient Session Expiration, which allows attackers to exploit old sessions for malicious activity.

Recommendations For cskefu version 7, consider implementing proper session expiration mechanisms to prevent the exploitation of old sessions. As a temporary workaround, restrict access to sensitive areas of the application that rely on session-based authentication until a proper fix is applied.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2024-29402

Affected Products

Cskefu

References · 9

• https://osv.dev/vulnerability/CVE-2024-29402 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29402 · Security Note
• https://github.com/cskefu/cskefu/pull/803 · Note
• https://github.com/cskefu/cskefu/issues/781 · Note
• https://twitter.com/CVEnew/status/1780363524327575593 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1780395960775885039 · Twitter Post
• https://t.me/cvenotify/76981 · Telegram Post
• https://t.me/cvenotify/100958 · Telegram Post
• https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158 · Note