> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cockroachlabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Technical Advisory 75758

export const InternalLink = ({version, path = "", children, ...props}) => {
  let detectedVersion = version || "stable";
  if (typeof window !== 'undefined' && !version) {
    const match = window.location.pathname.match(/\/docs\/([^/]+)/);
    if (match) {
      detectedVersion = match[1];
    }
  }
  const normalizedPath = path.startsWith("/") ? path.slice(1) : path;
  return <a href={`/docs/${detectedVersion}/${normalizedPath}`} {...props}>
      {children}
    </a>;
};

Publication date: February 10, 2022

## Description

Under some circumstances, all users, including users without the [`admin` role](https://www.cockroachlabs.com/docs/v21.2/ui-overview#db-console-access) or [`CANCELQUERY` option](https://www.cockroachlabs.com/docs/v21.2/create-user#role-options), are able to cancel any other users' sessions on the [**Sessions** page](https://www.cockroachlabs.com/docs/v21.2/ui-sessions-page) of the DB Console on CockroachDB v20.2, v21.1, and v21.2.

This issue is fixed in <InternalLink version="releases" path="v20.2">v20.2.19</InternalLink>, <InternalLink version="releases" path="v21.1">v21.1.14</InternalLink>, and <InternalLink version="releases" path="v21.2">v21.2.5</InternalLink>.

## Statement

The fix has been applied to maintenance versions <InternalLink version="releases" path="v20.2">v20.2.19</InternalLink>, <InternalLink version="releases" path="v21.1">v21.1.14</InternalLink>, and <InternalLink version="releases" path="v21.2">v21.2.5</InternalLink> of CockroachDB.

## Mitigation

Users of CockroachDB are encouraged to upgrade to a maintenance version with the fix applied: <InternalLink version="releases" path="v20.2">v20.2.19</InternalLink>, <InternalLink version="releases" path="v21.1">v21.1.14</InternalLink>, or <InternalLink version="releases" path="v21.2">v21.2.5</InternalLink>.

## Impact

All deployments up to v20.2.18, v21.1.13, and v21.2.4 are affected.

Users without the appropriate permissions may cancel any other users' sessions from the DB Console.

Questions about any technical alert can be directed to our [support team](https://support.cockroachlabs.com/).