Description
2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 2N Telekomunikace a.s. | 2N Access Commander | < 3.5 | 3.5 |
References
- https://www.2n.com/en-GB/download/cve_2025_59786_acom_3_5_v1pdf vendor-advisory