2n: >> Access Commander >> 3.4.2 Security Vulnerabilities
Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption.
This vulnerability can only be exploited after authenticating with administrator privileges.
CVSS Score
5.3
EPSS Score
0.002
Published
2026-03-04
2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.
CVSS Score
6.0
EPSS Score
0.003
Published
2026-03-04
2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating improper handling of invalid input and potential security or availability impacts.
CVSS Score
5.3
EPSS Score
0.002
Published
2026-03-04