Lucene search

K
osvGoogleOSV:CVE-2021-25970
HistoryOct 20, 2021 - 12:15 p.m.

CVE-2021-25970

2021-10-2012:15:07
Google
osv.dev
4
camaleon cms
active session
password change
security vulnerability

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

59.5%

Camaleon CMS 0.1.7 to 2.6.0 doesn’t terminate the active session of the users, even after the admin changes the user’s password. A user that was already logged in, will still have access to the application even after the password was changed.

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

59.5%