PT-2020-19082
CVE-2020-6292
·
تاريخ النشر
2020-07-14
·
تاريخ التحديث
2020-07-14
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SAP Disclosure Management version 10.1
Description
The logout mechanism in the affected software does not properly invalidate one of the session cookies, resulting in insufficient session expiration.
Recommendations
For SAP Disclosure Management version 10.1, update to a version that properly handles session cookie invalidation after logout to prevent insufficient session expiration.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾