Lucene search
GoogleOSV:CVE-2021-21032HistoryFeb 11, 2021 - 8:15 p.m.
CVE-2021-21032
2021-02-1120:15:14
Google
osv.dev
5
magento
session invalidation
unauthorized access
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation of this issue could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation.
Related
osv
osv
BIT-magento-2021-21032
2024-03-06 10:59:18
Magento Insufficient Session Expiration
2022-05-24 17:41:56
cvelist
cvelist
cve
cve
CVE-2021-21032
2021-02-11 20:15:14
nvd
nvd
CVE-2021-21032
2021-02-11 20:15:14
github
github
Magento Insufficient Session Expiration
2022-05-24 17:41:56
prion
prion
Authentication flaw
2021-02-11 20:15:00
adobe
adobe
APSB21-08 Security updates available for Magento
2021-02-09 00:00:00