| Package | Affected versions | Patched versions |
|---|---|---|
| aftermarket cloud | = 1.0.0 |
HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control over the account despite the password change leading to account takeover.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free