Manage User Sessions

Opis

Weaknesses in this category are related to the design and architecture of session management. Frequently these deal with the information or status about each user and their access rights for the duration of multiple requests. The weaknesses in this category could lead to a degradation of the quality of session management if they are not addressed when designing or implementing a secure architecture.

Wpisy w tej grupie

• CWE-384 Session Fixation
• CWE-488 Exposure of Data Element to Wrong Session
• CWE-579 J2EE Bad Practices: Non-serializable Object Stored in Session
• CWE-6 J2EE Misconfiguration: Insufficient Session-ID Length
• CWE-613 Insufficient Session Expiration
• CWE-841 Improper Enforcement of Behavioral Workflow

Źródła