Beveiligingsadvies

CVE-2022-44017

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-12-25 00:00:00
Laatst bijgewerkt 2025-04-15 13:23:41
Toegewezen door mitre
CVSS-score 7.5
Status PUBLISHED

Beschrijving

An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim's account after the victim logged out - /LMS/LM/#main can be used for this. This is due to the credentials not being cleaned from the local storage after logout.