VULNERABILITY INTELLIGENCE

CVE-2025-59786

CVSS score6 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-03-04
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Description

2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.

Weakness classification

  • CWE-613: Insufficient Session Expiration

Primary references