CVE-2021-38618

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except…

High · published October 4, 2021

CVSS v3.1
7.4
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except the password) to get access to an account. This occurs because of JSESSIONID mismanagement.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AC:H/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00994 · 62.3th percentile
Published
2021-10-04T17:23Z
EPSS history
Timeline
  • 04 OCT 17:23Z
    In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except…
    cvelistv5