CVE-2021-42545 – Insufficient Session Expiration in TopEase

https://notcve.org/view.php?id=CVE-2021-42545

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions. Se presenta una vulnerabilidad de caducidad de sesión insuficiente en la plataforma TopEase® de Business-DNA Solutions GmbH, versiones anteriores a 7.1.27 incluyéndola, que permite a un atacante remoto reusar, falsificar o robar otras sesiones de usuario y de administrador • https://confluence.topease.ch/confluence/display/DOC/Release+Notes • CWE-613: Insufficient Session Expiration •