Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows an attacker with a valid session token to maintain access to the account even after the legitimate user changes their password.
The product does not properly manage a user within its environment.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vacation_rental_management_platform | Summerpearlgroup | * | 1.0.2 (excluding) |