Apache Superset < 2.1.0 Secure Session Key

critical Nessus Plugin ID 186510

Language:

Version 1.6 Jan 8, 2024, 11:20 PM CISA reference Plugin Feed: 202401082320
Version 1.5 Dec 21, 2023, 2:29 PM CVSS metrics ("CVSSv3 score" set to 9.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202312211429
Version 1.5 Jan 8, 2024, 9:29 PM CISA reference Plugin Feed: 202401082129
Version 1.4 Dec 20, 2023, 2:36 PM CVSS metrics ("CVSSv3 score" set to 8.9. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L") Plugin Feed: 202312201436
Version 1.4 Dec 21, 2023, 12:32 PM CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202312211232
Version 1.3 Dec 19, 2023, 8:16 PM CVSS metrics ("CVSSv3 score" set to 9.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202312192016
Version 1.3 Dec 20, 2023, 12:39 PM CVSS metrics ("CVSSv3 score" set to 8.9) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L") Plugin Feed: 202312201239
Version 1.2 Dec 18, 2023, 2:01 PM CVSS metrics ("CVSSv3 score" set to 8.9. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L") Plugin Feed: 202312181401
Version 1.1 Dec 4, 2023, 3:10 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" set to "Exploits are available". "Exploit framework metasploit" set to "True") Plugin Feed: 202312041510
Version 1.0 Dec 1, 2023, 7:17 PM New Plugin Feed: 202312011917

* Changelogs are generally available for changes made after Nov 1, 2022