CWE-613 - Insufficient Session Expiration

Description

A web site permits an attacker to reuse old session credentials or session IDs for authorization. The weakness is introduced during Architecture and Design, Implementation stages.

Latest vulnerabilities for CWE-613

Multiple vulnerabilities in Siemens Desigo PXC and DXR Devices 2022-05-11
Medium Yes

Traffix SDC update for Eclipse Jetty 2022-04-27
Low Yes

Multiple vulnerabilities in Sylius 2022-03-15
High Yes

Multiple vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE) 2022-01-17
High Yes

Multiple vulnerabilities in Zyxel NBG6604 2022-01-03
Medium Yes

Insufficient Session Expiration in Zulip 2021-12-02
Medium Yes

Insufficient Session Expiration in Cisco Small Business Series Switches 2021-11-04
High No

Insufficient Session Expiration in Fortinet FortiClientEMS 2021-10-06
High Yes

Multiple vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE) 2021-10-04
Medium Yes

Multiple vulnerabilities in Red Hat AMQ Broker 2021-09-30
Medium Yes

References

Description of CWE-613 on Mitre website