Threats tagged 'ghsa-53x4-p5j7-29q6'

Apache Answer versions prior to 2.0.2 contain an insufficient session expiration vulnerability where administrative API keys remain valid even after the associated administrator account is demoted, suspended, marked inactive, or deleted. This allows continued unauthorized access until the keys are explicitly revoked. The issue is fixed in version 2.0.2.