CVE-2021-34428

Related Vulnerabilities: CVE-2021-34428  

No description is available for this CVE.

Description

No description is available for this CVE.

Statement

Because the flaw's impact is low and Red Hat OpenStack Platform 13 will be retiring soon, no update will be provided at this time for the jetty code packaged in RHOSP's OpenDaylight.

Because the flaw's impact is low and Red Hat OpenStack Platform 13 will be retiring soon, no update will be provided at this time for the jetty code packaged in RHOSP's OpenDaylight.

Additional Information

  • Bugzilla 1974891: CVE-2021-34428 jetty: SessionListener can prevent a session from being invalidated breaking logout
  • CWE-613: Insufficient Session Expiration
  • FAQ: Frequently asked questions about CVE-2021-34428