EUVD-2021-25058

Malware in sbrugna...

CVE-2021-38618

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone who knows a user's credentials except the password to get access to an account. This occurs because of JSESSIONID mismanagement...

Gfos Workforce Management Licensing Issue Vulnerability

Gfos Workforce Management, a workforce management system from Mitre Corporation, U.S.A. A security vulnerability exists in Gfos Workforce Management, which stems from poor JSESSIONID management, where the application's login page is prone to bypass authentication and an attacker can use...

CVE-2021-38618

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone who knows a user's credentials except the password to get access to an account. This occurs because of JSESSIONID mismanagement...

CVE-2021-38618

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone who knows a user's credentials except the password to get access to an account. This occurs because of JSESSIONID mismanagement...

CVE-2021-38618

CVE-2021-38618 affects GFOS Workforce Management 4.8.272.1, where JSESSIONID mismanagement enables authentication bypass on the login page. Multiple connected sources (Red Hat advisory, CNVD/CNNVD-style entries, CVE lists) corroborate that an attacker with valid user credentials (excluding the pa...

CVE-2021-38618

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone who knows a user's credentials except the password to get access to an account. This occurs because of JSESSIONID mismanagement...

Mitre Corporation Gfos Workforce Management 授权问题漏洞

Gfos Workforce Management, a workforce management system from Mitre Corporation, U.S.A. A security vulnerability exists in Gfos Workforce Management, which stems from poor JSESSIONID management, where the application's login page is prone to bypass authentication and an attacker can use...

PT-2021-22250

Name of the Vulnerable Software and Affected Versions GFOS Workforce Management version 4.8.272.1 Description The login page of the application is prone to authentication bypass, allowing anyone who knows a user's credentials except the password to get access to an account. This occurs because of...

CVE-2021-38618: Undefined Security Weakness

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone who knows a user's credentials except the password to get access to an account. This occurs because of JSESSIONID mismanagement...