Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vffg-826v-q23h

Опубликовано: 12 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.1
CVSS3: 2.6

Описание

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.

EPSS

Процентиль: 2%
0.00015
Низкий

2.1 Low

CVSS4

2.6 Low

CVSS3

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 2.6
nvd
6 месяцев назад

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.

EPSS

Процентиль: 2%
0.00015
Низкий

2.1 Low

CVSS4

2.6 Low

CVSS3

Дефекты

CWE-613