PT-2020-19082
CVE-2020-6292
·
Published
2020-07-14
·
Updated
2020-07-14
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SAP Disclosure Management version 10.1
Description
The logout mechanism in the affected software does not properly invalidate one of the session cookies, resulting in insufficient session expiration.
Recommendations
For SAP Disclosure Management version 10.1, update to a version that properly handles session cookie invalidation after logout to prevent insufficient session expiration.
Found an issue in the description? Have something to add? Feel free to write us 👾