Beveiligingsadvies

CVE-2024-5995

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-14 07:18:32
Laatst bijgewerkt 2024-08-01 21:25:03
Toegewezen door twcert
CVSS-score 8.8
Status PUBLISHED

Beschrijving

The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the session is not properly configured, remaining valid for more than 7 days and can be reused.