CVE-2022-44017
An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim's account after the victim logged o…
Published: 2022-12-25 · CVSS: 7.5 · CVSS 3.1
An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim's account after the victim logged out - /LMS/LM/#main can be used for this. This is due to the credentials not being cleaned from the local storage after logout.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7