Localize · Report #7909
Business logic Failure - Browser cache management and logout vulnerability.
Validstatus
13upvotes
18 May 2014disclosed
How it was found
Vulnerability class: Business logic Failure - Browser cache management and logout vulnerability.
Vulnerability impact: Logging out from an application does not clear the browser cache of any sensitive information that have been stored.
Steps to reproduce: 1. Login to portal. 2.browse few tabs 3. Click Logout 4. Click browser back button 5. you should able to see previous page and not only previous page but also viewed pages in the portal by clicking back back button
Thanks Hari