CWE-613 - Insufficient Session Expiration

Description

A web site permits an attacker to reuse old session credentials or session IDs for authorization. The weakness is introduced during Architecture and Design, Implementation stages.

Latest vulnerabilities for CWE-613

Multiple vulnerabilities in IBM Security Directory Integrator 2024-05-03
High Yes

Insufficient Session Expiration in Shopware 2024-04-23
Medium Yes

Insufficient session expiration in IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 2024-04-22
Medium Yes

Multiple vulnerabilities in Keycloak 2024-04-17
Medium Yes

Multiple vulnerabilities in Siemens RUGGEDCOM APE1808 2024-04-15
Medium No

Multiple vulnerabilities in NEC Aterm series 2024-04-05
Medium Yes

Multiple vulnerabilities in Fortigate NGFW on Siemens RUGGEDCOM APE1808 devices 2024-03-18
Critical No

Multiple vulnerabilities in Joomla! 2024-02-20
Medium Yes

Insufficient Session Expiration in Palo Alto PAN-OS 2024-02-15
Low Yes

Multiple vulnerabilities in IBM Application Performance Management 2024-02-15
Critical Yes

References

Description of CWE-613 on Mitre website