CVE-2023-40732 (published 2023-09-12T09:32:32.841Z)
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks.
Affected products: Vendor: Siemens
Product: QMS Automotive
Versions: All versions < V12.39