Description
HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Commerce | 8.0 - 8.0.4.27, 9.0 - 9.0.1.17, 9.1.0 - 9.1.8 | — |