Vulnerabilities > CVE-2022-25590 - Insufficient Session Expiration vulnerability in Surveyking 0.2.0
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data using the browser cache when the user exits the application.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |