CVE-2021-38618
In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except the password) to …
Published: 2021-10-04 · CVSS: 7.4 · CVSS 3.1
In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except the password) to get access to an account. This occurs because of JSESSIONID mismanagement.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7