CVE-2020-35358 | BDVDB-2026-150452 Detail

Description#

DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access to some system data or functionality.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gist.github.com/anku-agar/0fec2ffd98308e550ce9b5d4b395d0d7

Exploit#

No public exploit known

History#

Version 12021-03-15Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.