https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:28:26 +0000 https://cve.radiocsirt.org/vuln/cve-2019-5638 <p><strong>Affected:</strong> Rapid7 Nexpose</p> <p>Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user&#39;s password is changed by an administrator due to an otherwise unrelated credential leak, that user account&#39;s current session is still valid after the password change, potentially allowing the attacker who originally compromised the credential to remain logged in and able to cause further damage.</p> <p><strong>Affected:</strong> Rapid7 Nexpose</p> <p>Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user&#39;s password is changed by an administrator due to an otherwise unrelated credential leak, that user account&#39;s current session is still valid after the password change, potentially allowing the attacker who originally compromised the credential to remain logged in and able to cause further damage.</p> https://cve.radiocsirt.org/vuln/cve-2019-5638