Vulnerabilities > CVE-2021-26037 - Insufficient Session Expiration vulnerability in Joomla Joomla!

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
joomla
CWE-613
NVD
Published: 2021-07-07
Updated: 2021-07-09

Summary

An issue was discovered in Joomla! 2.5.0 through 3.9.27. CMS functions did not properly termine existing user sessions when a user's password was changed or the user was blocked.

Vulnerable Configurations

Part Description Count
Application
Joomla
277

Common Weakness Enumeration (CWE)

References