CVE-2020-23136: Medium severity Microweber Microweber vulnerability
Published Nov 9, 2020
·Updated
Microweber v1.1.18 is affected by no session expiry after log-out.
Affected Software
2 affected components
composer/microweber/microweber=1.1.18
Microweber Microweber=1.1.18
Event History
Nov 9, 2020
CVE Published
via MITRE·05:02 PM
Data Sourced
via MITRE·05:02 PM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
May 24, 2022
Advisory Published
05:33 PM
Frequently Asked Questions
1
What is the severity of CVE-2020-23136?
CVE-2020-23136 is classified as a security vulnerability due to the lack of session expiry after log-out.
2
How do I fix CVE-2020-23136?
To fix CVE-2020-23136, ensure that sessions are properly invalidated upon user log-out.
3
What are the potential risks of CVE-2020-23136?
The risks of CVE-2020-23136 include unauthorized access to user accounts if users remain logged in after attempting to log out.
4
Which versions of Microweber are affected by CVE-2020-23136?
CVE-2020-23136 specifically affects Microweber version 1.1.18.
5
Is there a workaround for CVE-2020-23136?
A possible workaround for CVE-2020-23136 is to manually clear cookies and session data before exiting the application.