CVE-2025-59786

Cookies are not Invalidated upon Logout and Password Change PUBLISHED

Description (CNA)

2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.

Affected (CNA)

Vendor / product	Versions
2N Telekomunikace a.s. / 2N Access Commander	affected 0 before 3.5

CWE

CWE-613

References

https://www.2n.com/en-GB/download/cve_2025_59786_acom_3_5_v1pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.