An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim's account after the victim logged out - /LMS/LM/#main can be used for this. This is due to the credentials not being cleaned from the local storage after logout.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-12-25T00:00:00

Updated: 2024-08-03T13:47:05.551Z

Reserved: 2022-10-29T00:00:00

Link: CVE-2022-44017

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-12-25T05:15:10.903

Modified: 2024-11-21T07:27:32.410

Link: CVE-2022-44017

cve-icon Redhat

No data.