CVE-2021-38823

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-38823
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-38823.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-38823
Published
2021-10-04T14:15:07Z
Modified
2025-02-19T03:21:01.543549Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not invalidate an admin session that is opened in a different browser.

References

Affected packages

Git / github.com/gamonoid/icehrm

Affected ranges

Type
GIT
Repo
https://github.com/gamonoid/icehrm
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f44b9ec8dd60f42c9e94ac78c55d82244b74b4db

Affected versions

13.*

13.1.OS

v13.*

v13.1.OS

v14.*

v14.0.OS
v14.1.OS

v15.*

v15.0.OS
v15.2.OS

v16.*

v16.0.OS
v16.1.OS

v18.*

v18.0.OS

v19.*

v19.0.OS

v20.*

v20.0.OS
v20.2.OS
v20.3.0.OS

v21.*

v21.0.0.OS
v21.1.0.OS

v23.*

v23.0.0.OS
v23.0.1.OS

v24.*

v24.0.0.OS

v26.*

v26.2.0.OS
v26.6.0.OS

v27.*

v27.0.0.OS
v27.0.1.OS
v27.0.2.OS

v28.*

v28.1.0.OS
v28.1.1.OS
v28.2.0.OS

v29.*

v29.0.0.OS

v30.*

v30.0.0.OS