863 matches found
CVE-2021-37156
Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated...
CVE-2021-37156
Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated...
Authentication flaw
Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated...
CVE-2021-37156
Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated...
UBUNTU-CVE-2021-37156
Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated...
CVE-2021-37156
Technical details such as affected products, versions, root cause, exploit information, or fixes are not publicly provided in the connected documents; monitor for updates from Redmine advisories and OSV/NVD feeds.
CVE-2021-37156
Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated...
CVE-2021-37156
Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated...
Redmine 代码问题漏洞
Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management, issue tracking, and role-based access control. A code issue vulnerability exists in Redmine that allows existing user sessions to continue with two-factor authenticati...
PT-2021-7937 · Redmine · Redmine
Name of the Vulnerable Software and Affected Versions: Redmine versions 4.2.0 through 4.2.1 Description: The issue is related to the incorrect session expiration in Redmine, a web application for project and task management. When two-factor authentication is enabled for a user's account, existing...
[ASA-202105-1] redmine: multiple issues
Arch Linux Security Advisory ASA-202105-1 ========================================= Severity: Critical Date : 2021-05-19 CVE-ID : CVE-2021-29274 CVE-2021-30163 CVE-2021-30164 CVE-2021-31863 CVE-2021-31864 CVE-2021-31865 CVE-2021-31866 Package : redmine Type : multiple issues Remote : Yes Link :...
Information Disclosure
Redmine is vulnerable to information disclosure. An attacker is able to discover the names of private projects if issue-journal details exist that have changes to projectid values...
Access Restriction Bypass
Redmine is vulnerable to access restriction bypass. It allows attackers to bypass the addissuenotes permission requirement by leveraging the Issues API...
Arbitrary File Read
redmine allows arbitrary file read. Insufficient input validation in the Git repository allows users to read arbitrary local files that are accessible by the application server process...
Timing Attack
Redmine is vulnerable to timing attack. It allows an attacker to learn the values of internal authentication keys by observing timing differences in string comparison operations within SysController and MailHandlerController...
Authorization Bypass
redmine is vulnerable to authorization bypass. The vulnerability exists as it is possible to bypass the addissuenotes permission requirement by leveraging the incoming mail handler...
Unrestricted File Upload
Redmine allows unrestricted file upload. The vulnerability exists due to the circumvent of the allowed filename extensions of uploaded attachments. before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the allowed filename extensions of uploaded attachments...
Mishandled Markup Data
Redmine is mishandling markup data...