Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the __ac session cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2012-3359 for the base64-encoded storage of the user and password in a cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat Conga Luci 权限许可和访问控制漏洞
Vulnerability Description
Red Hat Conga是美国红帽（Red Hat）公司的一套基于Web的集群管理工具。该工具主要有Luci和Ricci两部分组成，Ricci是运行于每一个集群节点上的代理；Luci主要用于搭建集群系统，并通过Ricci和集群中的节点进行通讯。 Red Hat Conga的Luci组件中存在安全漏洞，该漏洞源于程序没有正确处理用户会话超时。攻击者可通过访问__ac会话cookie利用该漏洞获取会话的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A