CVSS: 9.8EPSS: 0%CPEs: 7EXPL: 0CVE-2024-23679 – Enonic XP Session Fixation Vulnerability
https://notcve.org/view.php?id=CVE-2024-23679
Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes. Las versiones de Enonic XP inferiores a 7.7.4 son vulnerables a un problema de reparación de sesión. Un atacante remoto y no autenticado puede utilizar sesiones anteriores debido a la falta de atributos de sesión invalidantes. • https://github.com/advisories/GHSA-4m5p-5w5w-3jcf https://github.com/enonic/xp/commit/0189975691e9e6407a9fee87006f730e84f734ff https://github.com/enonic/xp/commit/1f44674eb9ab3fbab7103e8d08067846e88bace4 https://github.com/enonic/xp/commit/2abac31cec8679074debc4f1fb69c25930e40842 https://github.com/enonic/xp/issues/9253 https://github.com/enonic/xp/security/advisories/GHSA-4m5p-5w5w-3jcf https://vulncheck.com/advisories/vc-advisory-GHSA-4m5p-5w5w-3jcf • CWE-384: Session Fixation •
CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0CVE-2008-3485
https://notcve.org/view.php?id=CVE-2008-3485
Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path. Vulnerabilidad de ruta de búsqueda no confiable en Citrix MetaFrame Presentation Server permite a usuarios locales conseguir privilegios a través de un icabar.exe malicioso colocado en una ruta de búsqueda. • http://securityreason.com/securityalert/4110 http://www.securityfocus.com/archive/1/494952/100/0/threaded http://www.securityfocus.com/bid/30446 https://exchange.xforce.ibmcloud.com/vulnerabilities/44490 • CWE-264: Permissions, Privileges, and Access Controls •