PT-2026-22933 · 2N · 2N Access Commander
CVE-2025-59786
·
Publicado
2026-03-04
·
Atualizado
2026-03-05
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
2N Access Commander versions prior to 3.4.2
Description
The web application does not properly invalidate session tokens, which allows multiple session cookies to remain active even after a user logs out. This can potentially allow unauthorized access.
Recommendations
Update to a version later than 3.4.2.
Correção
Insufficient Session Expiration
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
2N Access Commander