CVE-2023-40732
Assigner: siemens
Published: 2023-09-12T09:32:32.841Z
State: PUBLISHED
descriptions: value: A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks.
affected: vendor: Siemens
product: QMS Automotive
versions: version: All versions < V12.39
status: affected
defaultStatus: unknown
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
baseScore: 3.9
baseSeverity: LOW
problemTypes: descriptions: cweId: CWE-613
description: CWE-613: Insufficient Session Expiration
type: CWE