{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1563 Remote Service Session Hijacking","home_page_url":"https://patchfirst.co/technique/T1563/","feed_url":"https://patchfirst.co/feed/technique/T1563.json","description":"New and newly exploited CVEs that lead to ATT&CK T1563 Remote Service Session Hijacking, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2020-5290","url":"https://patchfirst.co/cve/CVE-2020-5290/","title":"CVE-2020-5290: session fixation in rCTF","content_text":"redpwn · rctf. Not in CISA KEV. EPSS 0.8% (higher than 57% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1563 Remote Service Session Hijacking. Priority 16.0 of 100.","summary":"session fixation in rCTF","date_published":"2020-04-01T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1189","T1563"],"_patchfirst":{"reason":"published","priority":16,"kev":null,"epss":{"score":0.00816,"percentile":0.57047},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"redpwn","product":"rctf","techniqueIds":["T1189","T1563"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-16782","url":"https://patchfirst.co/cve/CVE-2019-16782/","title":"CVE-2019-16782: Possible Information Leak / Session Hijack Vulnerability in Rack","content_text":"rack · rack. Not in CISA KEV. EPSS 3.7% (higher than 89.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1110 Brute Force; T1563 Remote Service Session Hijacking. Priority 22.4 of 100.","summary":"Possible Information Leak / Session Hijack Vulnerability in Rack","date_published":"2019-12-18T00:00:00.000Z","date_modified":"2024-08-05T01:24:48.000Z","tags":["T1110","T1563"],"_patchfirst":{"reason":"published","priority":22.4,"kev":null,"epss":{"score":0.03703,"percentile":0.89728},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"rack","product":"rack","techniqueIds":["T1110","T1563"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-18573","url":"https://patchfirst.co/cve/CVE-2019-18573/","title":"CVE-2019-18573: The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…","content_text":"Dell · RSA Identity Governance & Lifecycle. Not in CISA KEV. EPSS 1.0% (higher than 62.4% of CVEs). CVSS 8.7 HIGH. ATT&CK: T1563 Remote Service Session Hijacking. Priority 18.6 of 100.","summary":"The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…","date_published":"2019-12-18T00:00:00.000Z","date_modified":"2024-09-16T16:28:49.000Z","tags":["T1563"],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.00986,"percentile":0.6235},"cvss":{"score":8.7,"severity":"HIGH","version":"3.0"},"vendor":"Dell","product":"RSA Identity Governance & Lifecycle","techniqueIds":["T1563"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-3790","url":"https://patchfirst.co/cve/CVE-2019-3790/","title":"CVE-2019-3790: Ops Manager uaa client issues tokens after refresh token expiration","content_text":"Pivotal · Pivotal Ops Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.2% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1078 Valid Accounts; T1563 Remote Service Session Hijacking. Priority 14.5 of 100.","summary":"Ops Manager uaa client issues tokens after refresh token expiration","date_published":"2019-06-06T00:00:00.000Z","date_modified":"2024-09-16T22:20:48.000Z","tags":["T1078","T1563"],"_patchfirst":{"reason":"published","priority":14.5,"kev":null,"epss":{"score":0.00651,"percentile":0.51162},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Pivotal","product":"Pivotal Ops Manager","techniqueIds":["T1078","T1563"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1724","url":"https://patchfirst.co/cve/CVE-2019-1724/","title":"CVE-2019-1724: Cisco Small Business RV320 and RV325 Routers Session Hijacking Vulnerability","content_text":"Cisco · Cisco Small Business RV Series Router Firmware. Not in CISA KEV. EPSS 1.5% (higher than 73.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1563 Remote Service Session Hijacking. Priority 20.8 of 100.","summary":"Cisco Small Business RV320 and RV325 Routers Session Hijacking Vulnerability","date_published":"2019-05-03T00:00:00.000Z","date_modified":"2024-11-20T17:23:28.000Z","tags":["T1563"],"_patchfirst":{"reason":"published","priority":20.8,"kev":null,"epss":{"score":0.01455,"percentile":0.73442},"cvss":{"score":8.8,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco Small Business RV Series Router Firmware","techniqueIds":["T1563"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-3784","url":"https://patchfirst.co/cve/CVE-2019-3784/","title":"CVE-2019-3784: Cloud Foundry Stratos contains a Session Collision Vulnerability","content_text":"Cloud Foundry · Stratos. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 8.2 HIGH. ATT&CK: T1563 Remote Service Session Hijacking. Priority 18.6 of 100.","summary":"Cloud Foundry Stratos contains a Session Collision Vulnerability","date_published":"2019-03-07T00:00:00.000Z","date_modified":"2024-09-16T18:56:08.000Z","tags":["T1563"],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.01058,"percentile":0.64467},"cvss":{"score":8.2,"severity":"HIGH","version":"3.0"},"vendor":"Cloud Foundry","product":"Stratos","techniqueIds":["T1563"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-8852","url":"https://patchfirst.co/cve/CVE-2018-8852/","title":"CVE-2018-8852: Philips e-Alert Unit (non-medical device), Version R2.1 and prior","content_text":"Philips · e-Alert Unit (non-medical device). Not in CISA KEV. EPSS 1.9% (higher than 79.6% of CVEs). ATT&CK: T1563 Remote Service Session Hijacking. Priority 15.9 of 100.","summary":"Philips e-Alert Unit (non-medical device), Version R2.1 and prior","date_published":"2018-09-26T00:00:00.000Z","date_modified":"2024-09-16T23:22:08.000Z","tags":["T1563"],"_patchfirst":{"reason":"published","priority":15.9,"kev":null,"epss":{"score":0.01897,"percentile":0.79611},"cvss":null,"vendor":"Philips","product":"e-Alert Unit (non-medical device)","techniqueIds":["T1563"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}