HCL Technologies Compass Access Control Error Vulnerability

HCL Technologies Compass is a low-code change management software from HCL Technologies, USA. Manages the full range of testing activities and integration with developer tools. HCL Technologies Compass suffers from an Access Control Error vulnerability that stems from the application not disabling an authenticated session when the logout function is invoked, which can be exploited by an attacker who can replay it to the application and use it to emulate a user.