CVE-2021-38618

—

CVSS 3.1

8.1 high

EPSS

<1%p61

Published

Oct 4, 2021 (Oct 4, 2021)

Modified

Jun 17, 2026

Description

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except the password) to get access to an account. This occurs because of JSESSIONID mismanagement.

Vendors: gfos
Products: workforce management
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.