CWE-613 - Insufficient Session Expiration

Description

A web site permits an attacker to reuse old session credentials or session IDs for authorization. The weakness is introduced during Architecture and Design, Implementation stages.

Latest vulnerabilities for CWE-613

Multiple vulnerabilities in IBM Security Verify Directory 2024-08-28
High Yes

Insufficient session expiration in F5 BIG-IP Next Central Manager 2024-08-15
Medium Yes

Insufficient session expiration in Fortinet products 2024-08-14
Low Yes

Invalid session timeout in IBM QRadar Suite 2024-08-12
Medium Yes

Multiple vulnerabilities in Apache StreamPark 2024-07-26
Low Yes

Insufficient Session Expiration in Craft CMS 2024-07-26
Medium Yes

Multiple vulnerabilities in Siemens SINEC Traffic Analyzer 2024-06-12
Medium Yes

Multiple vulnerabilities in IBM Security Directory Integrator 2024-05-03
High Yes

Insufficient Session Expiration in Shopware 2024-04-23
Medium Yes

Insufficient session expiration in IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 2024-04-22
Medium Yes

References

Description of CWE-613 on Mitre website