CVE-2026-101271:详情

CVE-2026-101271

2026-09-29
13h17 +00:00
Authorization problems
A07-Identif. and Authent. Fail
2026-09-29
21h28 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

OAuth credentials (access tokens) are valid for the entirety of their lifetime, even if the application (OAuth client) they are bound to is manually disabled.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-613 DEPRECATED: Insufficient Session Expiration
This entry has been deprecated because it was insufficiently clear. Consider CWE-1462 and its descendants.

参考资料