Mavenlink · Report #21172
Cookies are not cleared from Server side on Logout
Duplicatestatus
4upvotes
9 May 2017disclosed
How it was found
i logged out from my account after using it and then clicked on back i found my account logged in.Cookies are not handled well on logged out.I saw that cookie is not expired. If the hacker gets victim's cookie, the hacker can use it for a pretty good time period.
Best Regardz
RajaUzairAbdullah
@UzaiRaja