QSearchQSearch

CVE-2021-38618

7.4 HIGH

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a use...

Published: 2021-10-04 · Last updated: 2026-06-17

Severity and scoring

CVSS
7.4 HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

VendorProduct
gfosworkforce_management

Description

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except the password) to get access to an account. This occurs because of JSESSIONID mismanagement.

Source: NVD

References