CVE-2020-6292CWE-613

Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration

Medium · published July 14, 2020

CVSS v3.0
4.6
EPSS
1%
Percentile
47.3
In the wild
Unconfirmed
What it is

Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration.

The record
Technical detail
CVSS v3.0
4.6 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00586 · 47.3th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2020-07-14T12:30Z
EPSS history
Timeline
  • 14 JUL 12:30Z
    Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration
    cvelistv5