CVE-2020-6292

Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration...

CVE-2020-6292

CVE-2020-6292 affects SAP Disclosure Management 10.1, where the logout mechanism fails to invalidate a session cookie, resulting in insufficient session expiration. This is documented across multiple sources (SAP disclosures, Red Hat entry, CNVD/CVE coverage). The underlying issue is a cookie inv...