Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Magento Insufficient Session Expiration Vulnerability - CVE-2021-21032 - Vulnerability Database
Magento

Magento Insufficient Session Expiration Vulnerability - CVE-2021-21032

Medium
Reference: CVE-2021-21032
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-21032
Title: Magento Insufficient Session Expiration Vulnerability
Overview:

Magento versions 2.4.1 (and earlier) 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation of this issue could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation.