Security Advisory
CVE-2008-4689
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.