Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:16:06 +0000 cnvd-2018-11998 https://cve.radiocsirt.org/vuln/cnvd-2018-11998 cnvd-2018-11998 https://cve.radiocsirt.org/vuln/cnvd-2018-11998 EUVD-2026-61068 https://cve.radiocsirt.org/vuln/euvd-2026-61068 EUVD-2026-61068 https://cve.radiocsirt.org/vuln/euvd-2026-61068 fkie_cve-2018-1127 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1127 <p>Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few minutes allowing attackers to replay tokens acquired via sniffing/MITM attacks and authenticate as the target user.</p> <p>Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few minutes allowing attackers to replay tokens acquired via sniffing/MITM attacks and authenticate as the target user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1127 GHSA-jwq3-h8rx-wcwj https://cve.radiocsirt.org/vuln/ghsa-jwq3-h8rx-wcwj <p>Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few minutes allowing attackers to replay tokens acquired via sniffing/MITM attacks and authenticate as the target user.</p> <p>Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few minutes allowing attackers to replay tokens acquired via sniffing/MITM attacks and authenticate as the target user.</p> https://cve.radiocsirt.org/vuln/ghsa-jwq3-h8rx-wcwj gsd-2018-1127 https://cve.radiocsirt.org/vuln/gsd-2018-1127 gsd-2018-1127 https://cve.radiocsirt.org/vuln/gsd-2018-1127 RHSA-2018:2616 — Red Hat Security Advisory: RHGS WA security, bug fix, and enhancement update https://cve.radiocsirt.org/vuln/rhsa-2018:2616 <p>tendrl-api: Improper cleanup of session token can allow attackers to hijack user sessions</p> <p>tendrl-api: Improper cleanup of session token can allow attackers to hijack user sessions</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2616