Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-38618
HistoryOct 04, 2021 - 6:15 p.m.

Authentication flaw

2021-10-0418:15:00
PRIOn knowledge base
www.prio-n.com
2

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user’s credentials except the password) to get access to an account. This occurs because of JSESSIONID mismanagement.

CPENameOperatorVersion
workforce_managementeq4.8.272.1

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%

Related for PRION:CVE-2021-38618