PT-2021-20893
CVE-2021-35342
·
تاريخ النشر
2021-08-27
·
تاريخ التحديث
2021-09-01
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
useradm service versions 1.13.0 through 1.14.0
Description:
The issue allows users to access the system with their JWT token after logout due to missing invalidation when the JWT verification cache is enabled.
Recommendations:
For useradm service version 1.13.0, update to version 1.13.1 or later.
For useradm service version 1.14.0, update to version 1.14.1 or later.
As a temporary workaround, consider disabling the JWT verification cache until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾