PT-2022-9842 · Hcl · Hcl Commerce

Published 2022-05-06 · Updated 2022-05-16 · CVE-2021-27751

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HCL Commerce (affected versions not specified)

Description The issue is related to an Insufficient Session Expiration, where parts of the application remain accessible after the session has expired, under certain circumstances.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2021-27751

Affected Products

Hcl Commerce

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-27751 · Security Note
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0097650 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27751 · Vendor Advisory
• https://t.me/cvenotify/30292 · Telegram Post