PT-2024-22696

CVE-2024-29070

Published

2024-07-23

Updated

2025-07-10

Description by

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 2.1.4

Description The issue arises when a user's session is not invalidated after logout. Upon successful login, the Backend service returns an "Authorization" credential, which can still be used to initiate requests and access data even after the user has logged out.

Recommendations For versions prior to 2.1.4, upgrade to version 2.1.4 to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

L0Ne1Y

Vendors

Affected products

Weakness enumeration

CWE-613: Insufficient Session Expiration

Related identifiers