4 matches found
EUVD-2025-208279
2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application...
CVE-2025-59786
2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application...
PT-2024-27046 · Unknown · Wvp Gb28181 Pro
Name of the Vulnerable Software and Affected Versions: Wvp GB28181 Pro version 2.0 Description: An access control issue allows users to continue accessing information in the application after deleting their own or administrator accounts, provided they do not log out of their deleted accounts...
CVE-2023-40732
A vulnerability has been identified in QMS Automotive All versions V12.39. The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks...