CVE-2021-27751

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-613

Affected software

No affected versions have been published.

Timeline

Published: May 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-277535.5"Sametime Android PathTraversal Vulnerability"CVE-2021-277555.5"Sametime Android potential path traversal vulnerability when using File class"CVE-2021-277567.5"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker ca CVE-2021-277577.5" Insecure password storage issue.The application stores sensitive information in cleartext within a resource that might be accessible to an CVE-2021-277586.5There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to lo CVE-2021-277596.5This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was se CVE-2021-277605.5An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause CVE-2021-277617.5Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks CVE-2021-277629.8Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses CVE-2021-277646.5Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing fla CVE-2021-277657.8The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a loca CVE-2021-277667.8The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local us