| Package | Affected versions | Patched versions |
|---|---|---|
| stratos | < 2.3.0 | 2.3.0 |
Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret. A malicious user with default session store secret can brute force another user's current Stratos session, and act on behalf of that user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free