CVE-2022-44017

An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim's account after the victim logged out - /LMS/LM/#main can be used for this. This is due to the credentials not being cleaned from the local storage after logout.

• CWE-384
• CWE-384

• https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/Exploit, Third Party Advisory
• https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/Exploit, Third Party Advisory

Published

Dec 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-44011An issue was discovered in ClickHouse before 22.9.1.2603. An…6.5
• CVE-2022-44012An issue was discovered in /DS/LM_API/api/SelectionService/I…5.4
• CVE-2022-44013An issue was discovered in Simmeth Lieferantenmanager before…9.1
• CVE-2022-44014An issue was discovered in Simmeth Lieferantenmanager before…6.5
• CVE-2022-44015An issue was discovered in Simmeth Lieferantenmanager before…9.8
• CVE-2022-44016An issue was discovered in Simmeth Lieferantenmanager before…7.5
• CVE-2022-44018In Softing uaToolkit Embedded before 1.40.1, a malformed Pub…7.5
• CVE-2022-44019In Total.js 4 before 0e5ace7, /api/common/ping can achieve r…8.8
• CVE-2022-4402A vulnerability classified as critical has been found in Rai…7.2
• CVE-2022-44020An issue was discovered in OpenStack Sushy-Tools through 0.2…5.5
• CVE-2022-44022PwnDoc through 0.5.3 might allow remote attackers to identif…5.3
• CVE-2022-44023PwnDoc through 0.5.3 might allow remote attackers to identif…5.3