CVE-2021-42545

Publication date

2021-11-30 11:28:15

Family

NCSC.ch

State

PUBLISHED

Description

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions.