← CVE Intelligence

CVE-2024-21722

[20240201] - Core - Insufficient session expiration in MFA management views PUBLISHED

Description (CNA)

The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified.

Affected (CNA)

Vendor / productVersions
Joomla! Project / Joomla! CMSaffected 3.2.0-3.10.14; affected 4.0.0-4.4.2; affected 5.0.0-5.0.2

CWE

CWE-613

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.