An issue exists in Simmeth Lieferantenmanager prior to 5.6. Due to errors in session management, an attacker can log back into a victim's account after the victim logged out - /LMS/LM/#main can be used for this. This is due to the credentials not being cleaned from the local storage after logout.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
simmeth lieferantenmanager |
Vulmon