Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-10223

Improper Session Cleanup on Role Removal in Web Admin Panel in AxxonSoft Axxon One (C-Werk)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AxxonSoft

Description

Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.3 on Windows allows a local or remote authenticated attacker to retain access with removed privileges via continued use of an unexpired session token until natural expiration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AxxonSoft AxxonOne C-Werk

Default version status: unaffected

  • 0 to ≤ 2.0.3affected

References