Vulnerability CVE-2019-19199


Published: 2020-10-02

Description:
REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout.

See advisories in our WLB2 database:
Topic
Author
Date
Low
MailDepot 2032 SP2 Session Expiration
Micha Borrmann
30.09.2020

Type:

CWE-613

(Insufficient Session Expiration)

 References:
http://seclists.org/fulldisclosure/2020/Sep/49
https://www.reddoxx.com/en/products/archiving/
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-049.txt
https://www.syss.de/pentest-blog/

Copyright 2024, cxsecurity.com

 

Back to Top