CVE-2022-41542 : devhub 0.102.0 was discovered to contain a broken session control.

devhub 0.102.0 was discovered to contain a broken session control.

Published 2022-10-17 14:15:14

Updated 2022-10-19 15:10:36

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2022-41542

Devhubapp » Devhub » Version: 0.102.0
cpe:2.3:a:devhubapp:devhub:0.102.0:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.16%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 53 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.4	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N	2.8	2.5	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None

CWE-613 Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

Assigned by: nvd@nist.gov (Primary)

https://devhubapp.com/

DevHub | GitHub Notifications & Activities on your Desktop
Vendor Advisory
https://app.devhubapp.com/

DevHub
Vendor Advisory
http://devhub.com

DevHub | Localized Digital Marketing Platform
Not Applicable
https://medium.com/@sc0p3hacker/cve-2022-41542-session-mis-configuration-in-devhub-application-ca956bb9027a

CVE-2022–41542 Session Mis-Configuration in Devhub Application | by Sc0p3 Hack3r | Oct, 2022 | Medium
Exploit;Third Party Advisory

Jump to