CVE-2026-101271 : 詳細

CVE-2026-101271

2026-09-29
13h17 +00:00
Authorization problems
A07-Identif. and Authent. Fail
2026-09-29
21h28 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

OAuth credentials (access tokens) are valid for the entirety of their lifetime, even if the application (OAuth client) they are bound to is manually disabled.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-613 DEPRECATED: Insufficient Session Expiration
This entry has been deprecated because it was insufficiently clear. Consider CWE-1462 and its descendants.

参考資料