Skip to main content

Qms Automotive CVE-2023-40732

LOW
Insufficient Session Expiration (CWE-613)
2023-09-12 productcert@siemens.com
Information Disclosure Qms Automotive
3.9
CVSS 3.1 · NVD

Severity by source

NVD PRIMARY
3.9 LOW
AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Sep 12, 2023 - 10:15 nvd
LOW 3.9

DescriptionNVD

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks.

AnalysisAI

A vulnerability has been identified in QMS Automotive (All versions < V12.39). Rated low severity (CVSS 3.9), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-613. A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks. Affected products include: Siemens Qms Automotive.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Qms Automotive

View all
CVE-2021-27389 CRITICAL
9.8 Apr 22

A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive (All versions < V12.30).

CVE-2023-40731 HIGH
8.8 Sep 12

A vulnerability has been identified in QMS Automotive (All versions < V12.39). Rated high severity (CVSS 8.8), this vuln
CVE-2023-40730 HIGH
8.8 Sep 12

A vulnerability has been identified in QMS Automotive (All versions < V12.39). Rated high severity (CVSS 8.8), this vuln
CVE-2023-40726 HIGH
8.8 Sep 12

A vulnerability has been identified in QMS Automotive (All versions < V12.39). Rated high severity (CVSS 8.8), this vuln
CVE-2023-40728 HIGH
7.8 Sep 12

A vulnerability has been identified in QMS Automotive (All versions < V12.39). Rated high severity (CVSS 7.8), this vuln
CVE-2023-40727 HIGH
7.8 Sep 12

A vulnerability has been identified in QMS Automotive (All versions < V12.39). Rated high severity (CVSS 7.8), this vuln
CVE-2022-43958 HIGH
7.6 Nov 08

A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). R
CVE-2023-40729 HIGH
7.4 Sep 12

A vulnerability has been identified in QMS Automotive (All versions < V12.39). Rated high severity (CVSS 7.4), this vuln
CVE-2023-40724 HIGH
7.3 Sep 12

A vulnerability has been identified in QMS Automotive (All versions < V12.39). Rated high severity (CVSS 7.3), this vuln
CVE-2023-40725 MEDIUM
4.0 Sep 12

A vulnerability has been identified in QMS Automotive (All versions < V12.39). Rated medium severity (CVSS 4.0), this vu

Same weakness CWE-613 – Insufficient Session Expiration

View all
CVE-2022-36179 CRITICAL POC
9.8
CVE-2026-26342 CRITICAL POC
9.8
CVE-2016-5069 CRITICAL POC
9.8
CVE-2024-29401 CRITICAL POC
9.8
CVE-2023-49091 CRITICAL POC
9.8
CVE-2023-5865 CRITICAL POC
9.8
CVE-2023-5838 CRITICAL POC
9.8
CVE-2023-1854 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-40732 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy