CWE-613 - Insufficient Session Expiration

Description

A web site permits an attacker to reuse old session credentials or session IDs for authorization. The weakness is introduced during Architecture and Design, Implementation stages.

Latest vulnerabilities for CWE-613

Session management vulnerability in IBM DataPower Gateway 2022-11-22
Low Yes

Multiple vulnerabilities in GLPI 2022-11-21
High Yes

Multiple vulnerabilities in Dell EMC Integrated Data Protection Appliance 2022-11-04
Medium Yes

Multiple vulnerabilities in IBM Sterling B2B Integrator 2022-10-18
Medium Yes

Multiple vulnerabilities in IBM InfoSphere Information Server 2022-10-10
Medium Yes

Multiple vulnerabilities in IBM Rational Change 2022-10-06
Medium Yes

Insecure session management in Apache Airflow 2022-10-04
Low Yes

Multiple vulnerabilities in IBM QRadar SIEM 2022-08-24
High Yes

Insufficient session expiration in IBM i2 iBase 2022-08-17
Low Yes

Insufficient session expiration in BIG-IP iControl REST 2022-08-04
Medium Yes

References

Description of CWE-613 on Mitre website