PT-2021-23622 · Unknown · Topease Platform

Published 2021-11-30 · Updated 2021-12-06 · CVE-2021-42545

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions TopEase Platform versions prior to 7.1.28

Description An insufficient session expiration issue exists, allowing a remote attacker to reuse, spoof, or steal other user and admin sessions.

Recommendations For versions prior to 7.1.28, update to version 7.1.28 or later to resolve the issue.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2021-42545

Affected Products

Topease Platform

References · 3

• https://confluence.topease.ch/confluence/display/DOC/Release+Notes · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-42545 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42545 · Security Note