[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLYlbq4gaiwKHV9cYY2tw7ZGcehDPtS_ROj2xKaQCnM0":3,"g5a-risk:CVE-2008-1395":116},{"success":4,"data":5,"meta":114},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":69,"weaknesses":70,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":78,"seoMetadata":79,"configurations":104,"relatedVendorCves":112,"notableEvents":113},"CVE-2008-1395","What is CVE-2008-1395?","Plone CMS does not record users' authentication states, and implements the logout feature solely on the client side, which makes it easier for context-dependent attackers to reuse a logged-out session.","Plone CMS does not record users' authentication states, and implements the logout feature solely on the client side, which makes it easier for context-depend...","2008-03-20T00:44:00","2026-06-16T22:51:39.493",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":4,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.01295,[34,34,34,34,34,34,34],"High",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"plone","plone_cms","*","cpe:2.3:a:plone:plone_cms:*:*:*:*:*:*:*:*",1,[45,49,53,57,61,63,65,67],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F3754","Securityreason",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.procheckup.com\u002FHacking_Plone_CMS.pdf","Procheckup",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F489544\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F41423","Ibmcloud",[],{"url":46,"source":47,"tags":62},[],{"url":50,"source":51,"tags":64},[],{"url":54,"source":55,"tags":66},[],{"url":58,"source":59,"tags":68},[],8,[71],{"id":72,"name":73,"description":74,"extendedDescription":27,"status":75,"abstraction":76,"structure":77},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",[],{"title":80,"metaDescription":81,"keywords":82,"canonicalUrl":83,"structuredData":84},"What is CVE-2008-1395? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-1395, a high severity cyber security vulnerability from 2008. Plone CMS does not record users' authentication states, and ...","CVE-2008-1395, CVE-2008-1395 vulnerability, CVE-2008-1395 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, plone security, plone_cms vulnerability","\u002Fwhat-is\u002Fcve-2008-1395",{"@context":85,"@type":86,"headline":80,"description":81,"datePublished":10,"dateModified":11,"author":87,"publisher":91,"about":95,"mainEntityOfPage":99,"articleSection":102,"keywords":103},"https:\u002F\u002Fschema.org","TechArticle",{"@type":88,"name":89,"url":90},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":88,"name":89,"url":90,"logo":92},{"@type":93,"url":94},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":96,"name":6,"description":97,"additionalType":98},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":100,"@id":101},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-1395","Cybersecurity","CVE-2008-1395, CVE-2008-1395 vulnerability, CVE-2008-1395 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[105],{"Operator":28,"Negate":28,"Nodes":106},[107],{"Operator":108,"Negate":32,"CPEMatch":109},"OR",[110],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":111,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"88913B9B-AF24-489A-83E5-A9688F4DAA12",[],[],{"lastModified":11,"cacheTime":115,"version":22},1792362700378,{"score":117,"band":118,"action":119,"scoredAt":120},46,"Medium","Plan remediation","2026-10-17T06:35:48.432929+00:00"]