CVE-2025-59786 - CVE House
Back to Database
Status published Medium CVE-2025-59786

Cookies are not Invalidated upon Logout and Password Change

Vulnerability Description

2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59786

Credits & Attribution

No credits recorded in the NVD database.

References

More from 2N Telekomunikace a.s.

View All →
CVE-2025-59787
HTTP 5XX Internal Server Errors
Medium 5.3
CVE-2025-59785
API - Insufficient Input Validation
Medium 5.3
CVE-2025-59784
Log Pollution - Control Characters Not Escaped
Medium 6.9
CVE-2025-59783
OS Command Injection over API
High 8.8

Affected Vendor

2N Telekomunikace a.s.

View all reports →

Affected Software

2N Access Commander
Vulnerable Versions:
0

Timeline

Official Publish: March 4th, 2026
Last Modified: March 4th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-613

MITRE ATT&CK TTPs

T1539 Steal Web Session Cookie
Credential Access
T1078 Valid Accounts
Persistence
T1550 Use Alternate Authentication Material
Defense Evasion
T1021 Remote Services
Lateral Movement
T1562 Impair Defenses
Defense Evasion