CVE-2021-27751
06.05.2022, 18:15
HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.Enginsight
| Vendor | Product | Version |
|---|---|---|
| hcltechsw | hcl_commerce | 8.0.0.0 ≤ 𝑥 < 8.0.4.28 |
| hcltechsw | hcl_commerce | 9.0.0.0 ≤ 𝑥 < 9.0.1.18 |
| hcltechsw | hcl_commerce | 9.1.0 ≤ 𝑥 < 9.1.9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration