OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, OliveTin does not revoke server-side sessions when a user logs out. Although the browser cookie is cleared, the corresponding session remains valid in server storage until expiry (default ≈ 1 year).
An attacker with a previously stolen or captured session cookie can continue authenticating after logout, resulting in a post-logout authentication bypass. This is a session management flaw that violates expected logout semantics. This issue has been patched in version 3000.11.1.
Attack Parameters
Attack Vector
Network
Атака возможна удалённо
Attack Complexity
Low
Легко эксплуатировать
Privileges Required
Low
Нужны базовые права
User Interaction
None
Не нужно действие пользователя
Impact Assessment
Confidentiality
Low
Частичная утечка данных
Integrity
Low
Частичная модификация данных
Availability
None
Нет нарушения работы
CVSS Vector v3.1
References 3
https://github.com/OliveTin/OliveTin/commit/d6a0abc3755d43107be1939567c52953bcb…
security-advisories@github.com
https://github.com/OliveTin/OliveTin/releases/tag/3000.11.1
security-advisories@github.com
https://github.com/OliveTin/OliveTin/security/advisories/GHSA-gq2m-77hf-vwgh
security-advisories@github.com