CVE-2013-7347
Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the __ac session cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2012-3359 for the base64-encoded storage of the user and password in a cookie.
View on NVDSeverity
N/A
EPSS
Probability of exploitation (next 30 days): 0.0006 (0.1%)
Percentile: 19.1%
EPSS: 2026-05-06
Affects
redhat:congaredhat:enterprise_linuxTechnical description
Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the __ac session cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2012-3359 for the base64-encoded storage of the user and password in a cookie.
Published: 3/31/2014, 2:58:45 PM
Last modified: 5/6/2026, 10:30:45 PM