CVE-2020-6292

Publication date

2020-07-14 12:30:14

Family

sap

State

PUBLISHED

Description

Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration.