CVE-2026-101271:詳細資料

CVE-2026-101271

2026-09-29
13h17 +00:00
Authorization problems
A07-Identif. and Authent. Fail
2026-09-29
21h28 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

OAuth credentials (access tokens) are valid for the entirety of their lifetime, even if the application (OAuth client) they are bound to is manually disabled.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-613 DEPRECATED: Insufficient Session Expiration
This entry has been deprecated because it was insufficiently clear. Consider CWE-1462 and its descendants.

參考資料