Vulnerabilities > CVE-2021-35214 - Insufficient Session Expiration vulnerability in Solarwinds Pingdom
Attack vector
LOCAL Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
The vulnerability in SolarWinds Pingdom can be described as a failure to invalidate user session upon password or email address change. When running multiple active sessions in separate browser windows, it was observed a password or email address change could be changed without terminating the user session. This issue has been resolved on September 13, 2021.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |