Gratipay · Report #193556
Session Fixation At Logout /Session Misconfiguration
Informativestatus
8upvotes
29 Dec 2016disclosed
How it was found
Dear Suppport Team , Commonly After Logout time , session should destroy and then new session should be created .. But in your application , it is not possible and same sessioncookie is there before logout and after logout from your application . For further details please find the attachment....
Ragards, a23