CVE-2022-44017

2022-12-2500:00:00

mitre

www.cve.org

simmeth lieferantenmanager

unauthorized access

session management

0.002 Low

EPSS

Percentile

55.6%

JSON

An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim’s account after the victim logged out - /LMS/LM/#main can be used for this. This is due to the credentials not being cleaned from the local storage after logout.