Unrated severityNVD Advisory· Published Aug 5, 2021· Updated Aug 4, 2024
CVE-2021-37156
CVE-2021-37156
Description
Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated.
Affected products
2- Redmine/Redminedescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.redmine.org/news/132mitrex_refsource_MISC
- www.redmine.org/projects/redmine/wiki/Security_Advisoriesmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.