PT-2024-13174

CVE-2023-44142

·

Published

2024-12-13

·

Updated

2024-12-14

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions Inactive Logout versions n/a through 3.2.2
Description The issue is related to a Missing Authorization vulnerability in Inactive Logout, allowing exploitation of incorrectly configured access control security levels.
Recommendations For versions n/a through 3.2.2, consider restricting access to the Inactive Logout feature until a proper fix is applied, focusing on correctly configuring access control security levels to prevent exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾