CVE-2021-27751CWE-613

HCL Commerce is affected by an Insufficient Session Expiration vulnerability.

Medium · published May 6, 2022

CVSS v3.1
4.4
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2022-05-06T18:10Z
EPSS history
Timeline
  • 06 MAY 18:10Z
    HCL Commerce is affected by an Insufficient Session Expiration vulnerability.
    cvelistv5