← Database

CVE-2021-38618

HIGH CVSS: 7.4 Published: 2021-10-04 Modified: 2026-06-17

Description

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except the password) to get access to an account. This occurs because of JSESSIONID mismanagement.

Affected Platforms

Gfos Workforce Management

Weakness Type

NVD-CWE-noinfo

References