Skip to content
OpenAdvisories

Vendor

Graylog

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3

    Incorrect management of session invalidation vulnerability in Graylog Web Interface

    Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of session invalidation after new logins. The application generates a new 'sessionId' each time a user authenticates, but does not invalidate p…