Unrated severityNVD Advisory· Published Mar 31, 2014· Updated May 6, 2026
CVE-2013-7347
CVE-2013-7347
Description
Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the __ac session cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2012-3359 for the base64-encoded storage of the user and password in a cookie.
Affected products
2- cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- rhn.redhat.com/errata/RHSA-2013-0128.htmlnvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.