3.9
Low
CVE-2023-40732 A vulnerability has been identified in QMS Automotive (All versions < V12.39)
Description
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QMS Automotive | Versions not published |
Other CVEs of QMS Automotive
The 11 CVEs of QMS Automotive →
CVE-2023-40731
A vulnerability has been identified in QMS Automotive (All versions < V12.39)
5.7
Medium
CVE-2023-40730
A vulnerability has been identified in QMS Automotive (All versions < V12.39)
7.1
High
CVE-2023-40729
A vulnerability has been identified in QMS Automotive (All versions < V12.39)
7.3
High
CVE-2023-40728
A vulnerability has been identified in QMS Automotive (All versions < V12.39)
7.3
High