CVE-2023-40732
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout.…
Published: 2023-09-12 · CVSS: 3.9 · CVSS 3.1
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7