Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-25970

Camaleon CMS - Insufficient Session Expiration after Password Change

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mend

Description

Camaleon CMS 0.1.7 to 2.6.0 doesn’t terminate the active session of the users, even after the admin changes the user’s password. A user that was already logged in, will still have access to the application even after the password was changed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

camaleon_cms camaleon_cms

  • 0.1.7 to < unspecifiedaffected
  • unspecified to ≤ 2.6.0affected

References