Vulners
Lucene search
CVE-2021-21031 Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of automatic termination of all sessions after changing passwords. This allows attackers to gain unauthorized access to limited resources. | 25 Mar 202100:00 | – | bdu_fstec |
 | CVE-2021-21031 | 11 Feb 202122:47 | – | circl |
 | Magento Commerce 和 Magento Open Source editions 代码问题漏洞 | 9 Feb 202100:00 | – | cnnvd |
 | Adobe Magento User Session Invalidation Deficiency Vulnerability | 10 Feb 202100:00 | – | cnvd |
 | CVE-2021-21031 | 11 Feb 202119:28 | – | cve |
 | EUVD-2022-2381 | 3 Oct 202520:07 | – | euvd |
 | Magento Insufficient Session Expiration | 24 May 202217:41 | – | github |
 | CVE-2021-21031 | 11 Feb 202120:15 | – | nvd |
 | BIT-MAGENTO-2021-21031 Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access | 6 Mar 202410:59 | – | osv |
| GHSA-4H3P-63X6-VWG2 Magento Insufficient Session Expiration | 24 May 202217:41 | – | osv |
10
[
{
"product": "Magento.com",
"vendor": "Adobe",
"versions": [
{
"lessThanOrEqual": "2.4.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThanOrEqual": "2.4.0-p1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThanOrEqual": "2.3.6",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThanOrEqual": "None",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]| Source | Link |
|---|---|
| helpx | www.helpx.adobe.com/security/products/magento/apsb21-08.html |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Feb 2021 19:28Current
5.5Medium risk
Vulners AI Score5.5
CVSS 35.6
EPSS0.00171