Session Remains Valid After Logout

Finding

The adidas Information Security Team confirmed that the reported issue was already known and under remediation.

Impact

A previously issued authenticated session could remain usable after logout, creating a risk if an attacker obtained the session before logout.

Disclosure Status

The security team acknowledged the report and indicated that the issue was already known and under remediation.

Public case study: limited technical detail; no credentials, session values, or private evidence published.