CVE-2007-6763

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was previously logged in) to access resources by pressing a back or forward button in a web browser.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jul 31, 2019
Last modified
Jun 16, 2026
NVD status
Modified
CVE-2007-6763: High severity, CVSS 8.8 | Vulnix