CVE-2019-20850

An issue was discovered in Mattermost Mobile Apps before 1.26.0. A view cache can persist on a device after a logout...

CVE-2019-20849

An issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a device after a logout...

CVE-2019-20849

Mattermost Mobile Apps prior to version 1.26.0 have a cookie-clearing issue: cookie data can persist on the device after logout. Root cause indicated across sources is failure to clear cookies on logout, enabling possible exposure of prior session data. Impact aligns with partial confidentiality ...

CVE-2019-20849

An issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a device after a logout...

CVE-2020-14451

An issue was discovered in Mattermost Mobile Apps before 1.29.0. The iOS app allowed Single Sign-On cookies and Local Storage to remain after a logout, aka MMSA-2020-0013...

CVE-2020-14451

CVE-2020-14451 describes a flaw in Mattermost Mobile Apps (iOS) prior to version 1.29.0 where Single Sign-On cookies and Local Storage were not cleared on logout, potentially allowing access to residual authentication state after sign-out. The issue is due to the app not clearing SSO cookies/loca...

CVE-2020-14451

An issue was discovered in Mattermost Mobile Apps before 1.29.0. The iOS app allowed Single Sign-On cookies and Local Storage to remain after a logout, aka MMSA-2020-0013...

CVE-2019-20849: Incomplete Cleanup

An issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a device after a logout...

PT-2020-14011

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions prior to 1.29.0 Description An issue was discovered in the iOS app where Single Sign-On cookies and Local Storage remained after a logout. Recommendations For versions prior to 1.29.0, update to version 1.29.0 o...

CVE-2020-4229

IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow another user to gain unauthorized access to a user's session. IBM X-Force ID: 175211...

Security Bulletin: Session is not invalidated After Logout

Summary IBM Worklight/MobileFoundation has addressed the following vulnerability.The application does not invalidate the validation cookie when the user logs out from the application Vulnerability Details CVEID: CVE-2020-4229 DESCRIPTION: IBM Worklight does not properly invalidate session cookies...

Open Redirection

mediawiki is vulnerable to open redirection. Having duplicate DOM query in the resources/src/mediawiki.page.ready/ready.js on a logout click allows an attacker to force a logout and external redirection of the usere using HTML content in a MediaWiki page...

CVE-2020-10959

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page...

CVE-2020-10959

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page...

CVE-2020-10959

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page...

Xxe

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page...

CVE-2020-10959

CVE-2020-10959 affects MediaWiki and is tied to the file resources/src/mediawiki.page.ready/ready.js . The vulnerability allows remote attackers to force a user logout and trigger an external redirection through HTML content in a MediaWiki page when running versions before 1.35.0. The connected d...

CVE-2020-10959

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page...

CVE-2020-10959

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page...

CVE-2020-10959: URL Redirection to Untrusted Site

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page...