https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:20:39 +0000 https://cve.radiocsirt.org/vuln/cve-2024-10318 <p><strong>Affected:</strong> F5 NGINX OpenID Connect, F5 NGINX Instance Manager, F5 NGINX API Connectivity Manager, F5 NGINX Ingress Controller</p> <p>A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim&#39;s session to an attacker-controlled account. As a result, although the attacker cannot log in as the victim, they can force the session to associate it with the attacker-controlled account, leading to potential misuse of the victim&#39;s session.</p> <p><strong>Affected:</strong> F5 NGINX OpenID Connect, F5 NGINX Instance Manager, F5 NGINX API Connectivity Manager, F5 NGINX Ingress Controller</p> <p>A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim&#39;s session to an attacker-controlled account. As a result, although the attacker cannot log in as the victim, they can force the session to associate it with the attacker-controlled account, leading to potential misuse of the victim&#39;s session.</p> https://cve.radiocsirt.org/vuln/cve-2024-10318