Approved changes feed: RSS · Atom

cpe:2.3:a:redmine:redmine:4.2.0:*:*:*:*:*:*:*

part: a version: 4.2.0 update: *

VendorRedmine (6d6ae2e0-ee18-59af-a962-088f2284e977)
ProductRedmine (bf868930-49a2-5c15-820d-d8b7c109a4c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/redmine purl2cpe 2026-06-01 10:12:13.780095
pkg:deb/ubuntu/redmine purl2cpe 2026-06-01 10:12:13.780096
pkg:github/redmine/redmine purl2cpe 2026-06-01 10:12:13.780098
pkg:redmine/redmine purl2cpe 2026-06-01 10:12:13.780099
pkg:rpm/opensuse/redmine purl2cpe 2026-06-01 10:12:13.780100

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-37156 vulnerable 2026-06-08 05:32:53.444324 Details available
Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated.
Published: 2021-08-05T20:36:35.000Z
Updated: 2024-08-04T01:16:02.538Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.