CVE Catalog

CVE-2023-35857

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.54%

41th percentile - higher than 41% of all known CVEs

Summary

In Siren Investigate versions before 13.2.2, session keys remain active even after logging out.

Risk Assessment

This may lead to unauthorized access to user data after logout, posing a significant security risk.

Recommendation

It is recommended to upgrade to version 13.2.2 or later to eliminate the session key issue.

Original NVD description (English source)

In Siren Investigate before 13.2.2, session keys remain active even after logging out.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS