Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-5995

Soar Cloud HR Portal - Insufficient Session Expiration

Description

The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the session is not properly configured, remaining valid for more than 7 days and can be reused.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Soar Cloud HR Portal

Default version status: unaffected

  • earlier to < 7.3.2024.0409affected

References