If you login to Scoutbook, navigate to forums, go back to scoutbook, logout, then login as someone else, then go to forums again, you will still be logged into the forums as the previous user.
This is true for navigating to my.scouting as well. I could get into the previous user’s my.scouting account.
I was also able to login to my.scouting as user B, then type in the scoutbook url, and get access to user A"s previous session.
This is a serious security risk.