CWE-613 - Insufficient Session Expiration

Description

A web site permits an attacker to reuse old session credentials or session IDs for authorization. The weakness is introduced during Architecture and Design, Implementation stages.

Latest vulnerabilities for CWE-613

Multiple vulnerabilities in Magento 2020-10-15
Medium Yes

Insufficient Session Expiration in Juniper Junos OS Evolved 2020-10-15
Low Yes

Multiple vulnerabilities in EdgeMax EdgeSwitch 2020-10-11
High Yes

Multiple vulnerabilities in ForLogic Qualiex 2020-09-04
Medium No

Insufficient session expiration in Tenable Nessus 2020-08-21
Low Yes

Insufficient Session Expiration in Fortinet FortiDeceptor 2020-06-22
Medium Yes

Multiple vulnerabilities in Mattermost, Mattermost Server 2020-06-19
High Yes

Information disclosure in Red Hat Keycloak 2020-05-13
Low Yes

Multiple vulnerabilities in NGINX Controller 2020-05-06
High Yes

Multiple vulnerabilities in Kiali 2020-04-28
High Yes

References

Description of CWE-613 on Mitre website