CVE-2021-36205CWE-459

Metasys session token

High · published April 15, 2022

CVSS v3.1

8.1

EPSS

1%

Percentile

63.6

In the wild

Unconfirmed

What it is

Under certain circumstances the session token is not cleared on logout.

The record

Technical detail

CVSS v3.1: 8.1 · HIGH
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.01037 · 63.6th percentile
Weakness: CWE-459 · Incomplete Cleanup
Published: 2022-04-15T16:24Z

EPSS history

Timeline

15 APR 16:24Z
Metasys session token
cvelistv5