Security Advisory
CVE-2008-4689
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.