CVE-2024-34007

Summary

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

Affected Software

VendorProductVersion RangeStatus
4.3 <= 4.3.3affected

Weaknesses

  • CWE-352: CWE-352 Cross-Site Request Forgery (CSRF)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References