<p>Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user’s session even after logout.</p>
<p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p>
Source link
