CVE-2022-36179
Critical · CVSS 9.8FusionDirectory — Improper Session Handling / Insufficient Session Expiration (CWE-613)
- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-613, CWE-613
Description
Fusiondirectory 1.3 suffers from Improper Session Handling.
Search profile — drives PoC discovery
Symbols session_handlingsession_expirationFusionDirectoryfusiondirectorysession_destroysession_regenerate_idsession_startAUTH_LDAPplugManageruserinfo
Keywords CVE-2022-36179FusionDirectorysession handlingCWE-613insufficient session expirationimproper sessionFusionDirectory 1.3PoCexploitvulnerability
Versions: 1.3
References
- https://lists.debian.org/debian-lts-announce/2023/07/msg00009.html
- https://yoroi.company/research/cve-advisory-full-disclosure-multiple-vulnerabilities/
- http://fusiondirectory.com
- https://lists.debian.org/debian-lts-announce/2023/07/msg00009.html
- https://yoroi.company/research/cve-advisory-full-disclosure-multiple-vulnerabilities/
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T12:30:39.000Z