Search Results | AttackerKB

Show filters

Clear All

Disclosure Year Disclosure Month

Collection Command and Control Credential Access Defense Evasion Discovery Execution Exfiltration Impact Initial Access Lateral Movement Persistence Privilege Escalation

1 Total Results

Displaying 1-1 of 1

Attacker Value

Unknown

Cloud Foundry Stratos Deploys With Public Default Session Store Secret

Disclosure Date: March 07, 2019 (last updated November 27, 2024)

Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret. A malicious user with default session store secret can brute force another user's current Stratos session, and act on behalf of that user.

1 Total Results

Displaying 1-1 of 1

Unknown

Cloud Foundry Stratos Deploys With Public Default Session Store Secret

Quick Cookie Notification