HexBrain

Gratipay · Report #193556

Session Fixation At Logout /Session Misconfiguration

Informativestatus
8upvotes
29 Dec 2016disclosed

How it was found

Dear Suppport Team , Commonly After Logout time , session should destroy and then new session should be created .. But in your application , it is not possible and same sessioncookie is there before logout and after logout from your application . For further details please find the attachment....

Ragards, a23

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original