Lucene search
PRIOn knowledge basePRION:CVE-2022-44017HistoryDec 25, 2022 - 5:15 a.m.
Code injection
2022-12-2505:15:00
PRIOn knowledge base
www.prio-n.com
1
code injection
session management
authentication vulnerability
An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim’s account after the victim logged out - /LMS/LM/#main can be used for this. This is due to the credentials not being cleaned from the local storage after logout.
| CPE | Name | Operator | Version |
|---|---|---|---|
| lieferantenmanager | lt | 5.6 |
Related
cve
cve
CVE-2022-44017
2022-12-25 05:15:10
cnvd
cnvd
Simmeth System Supplier Manager Session Management Error Vulnerability
2022-11-21 00:00:00
nvd
nvd
CVE-2022-44017
2022-12-25 05:15:10
cvelist
cvelist
CVE-2022-44017
2022-12-25 00:00:00
zdt
zdt
packetstorm
packetstorm
Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass
2022-11-15 00:00:00