CVE-2008-4689

CVE-2008-4689 describes a session hijacking vulnerability in Mantis versions prior to 1.1.3, where the session cookie is not properly unset upon logout. This flaw allows remote attackers to more easily hijack user sessions. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB, nor has it garnered significant community discussion or media coverage.