GHSA-jm72-67rm-763j

ghsaUSosv

MantisBT Insufficient Session Expiration cookie string not reset after logout

view advisory published 2022-04-21Licence: CC-BY-4.0

An issue was discovered in MantisBT before 2.24.5. It associates a unique cookie string with each user. This string is not reset upon logout (i.e., the user session is still considered valid and active), allowing an attacker who somehow gained access to a user's cookie to login as them.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2009-20001US	high8.1	0.87% (59th)	—	2021-03-07
An issue was discovered in MantisBT before 2.24.5. It associates a unique cookie string with each user. This string is not reset upon logout (i.e., the user session is still consid…

references

External citations — patches, advisories, analysis.

https://github.com/mantisbt/mantisbtPACKAGE
https://github.com/mantisbt/mantisbt/commit/79a78c09d5ef5ce098adc73f6f1416f00fc238a5WEB
https://mantisbt.org/bugs/view.php?id=11296WEB
https://mantisbt.org/bugs/view.php?id=27976WEB
https://nvd.nist.gov/vuln/detail/CVE-2009-20001ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan