CVE-2021-42545

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions.

Score

CVSS 3.1 9.1 Critical

Status

Modified - vulnerability@ncsc.ch

Published

2021-11-30

Last modified

2024-08-04

Weaknesses

CWE-613

Affected products

• Topease (Business-dna Solutions Gmbh)
• Topease (Business-dnasolutions)

References

• https://confluence.topease.ch/confluence/display/DOC/Release+Notes