CVE 2008-4689

Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.

Related bugs and status

CVE-2008-4689 (Candidate) is related to these bugs:

Bug #291531: [CVE-2008-4688] [CVE-2008-4689] multiple security vulnerabilites

		In	Importance	Status
291531	[CVE-2008-4688] [CVE-2008-4689] multiple security vulnerabilites	mantis (Ubuntu)	High	Fix Released
291531	[CVE-2008-4688] [CVE-2008-4689] multiple security vulnerabilites	Debian	Unknown	Fix Released
291531	[CVE-2008-4688] [CVE-2008-4689] multiple security vulnerabilites	mantis (Ubuntu Intrepid)	High	Fix Released

See the

CVE page on Mitre.org for more details.