CWE-613 - Insufficient Session Expiration

Description

A web site permits an attacker to reuse old session credentials or session IDs for authorization. The weakness is introduced during Architecture and Design, Implementation stages.

Latest vulnerabilities for CWE-613

Insufficient Session Expiration in Palo Alto Networks Prisma Cloud Compute Edition 2025-05-15
Low Yes

Insufficient session expiration in IBM Aspera Shares 2025-05-01
Low Yes

Insufficient Session Expiration in ALBEDO Telecom Net.Time - PTP/NTP Clock 2025-04-29
Medium Yes

Insufficient session expiration in IBM InfoSphere Information Server 2025-04-24
Low Yes

Insufficient Session Expiration in IBM Sterling Connect:Direct Web Services 2025-04-18
Low Yes

Insufficient session expiration in IBM Robotic Process Automation Control Center 2025-04-16
Low Yes

Insufficient Session Expiration in Siemens Products 2025-03-07
High Yes

Multiple vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE) 2025-02-17
Medium Yes

Multiple vulnerabilities in IBM Installation Manager 2025-02-11
Medium Yes

Insufficient session expiration in kanboard 2024-12-19
Medium Yes

References

Description of CWE-613 on Mitre website