MFA management system vulnerability: Sessions not properly terminated
CVE-2024-21722

Currently unrated

Key Information:

Vendor

Joomla
Status
Joomla! Cms
Vendor
CVE Published:
29 February 2024

What is CVE-2024-21722?

The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Joomla! CMS 3.2.0-3.10.14

Joomla! CMS 4.0.0-4.4.2

Joomla! CMS 5.0.0-5.0.2

References

https://developer.joomla.org/security-centre/925-20240201...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Carsten Schmitz
JSON
.