Skip to content
OpenAdvisories
High · 8.1 CVE-2021-42545 EUVD-2021-29514GHSA-mqvw-2h8p-cf8g

Insufficient Session Expiration in TopEase

Published Nov 30, 2021 · Updated Aug 4, 2024 · Assigned by NCSC.ch

Description

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions.

Affected products

VendorProductAffectedFixed
Business-DNA Solutions TopEase unspecified – ≤ 7.1.27 —

References