https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:57:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-174061 EUVD-2026-174061 https://cve.radiocsirt.org/vuln/euvd-2026-174061 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5638 <p>Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user&#39;s password is changed by an administrator due to an otherwise unrelated credential leak, that user account&#39;s current session is still valid after the password change, potentially allowing the attacker who originally compromised the credential to remain logged in and able to cause further damage.</p> <p>Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user&#39;s password is changed by an administrator due to an otherwise unrelated credential leak, that user account&#39;s current session is still valid after the password change, potentially allowing the attacker who originally compromised the credential to remain logged in and able to cause further damage.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-5638 https://cve.radiocsirt.org/vuln/ghsa-8pp6-343g-mgj6 <p>Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user&#39;s password is changed by an administrator due to an otherwise unrelated credential leak, that user account&#39;s current session is still valid after the password change, potentially allowing the attacker who originally compromised the credential to remain logged in and able to cause further damage.</p> <p>Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user&#39;s password is changed by an administrator due to an otherwise unrelated credential leak, that user account&#39;s current session is still valid after the password change, potentially allowing the attacker who originally compromised the credential to remain logged in and able to cause further damage.</p> https://cve.radiocsirt.org/vuln/ghsa-8pp6-343g-mgj6 https://cve.radiocsirt.org/vuln/gsd-2019-5638 gsd-2019-5638 https://cve.radiocsirt.org/vuln/gsd-2019-5638