CWE-613Insufficient Session Expiration

Description

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

Common consequences

• Access Control→Bypass Protection Mechanism

Potential mitigations

• Implementation
  Set sessions/credentials expiration date.

Related CWEs

Recent CVEs classified under this CWE