Improper session management - Session Does Not Expire On Password Reset

Writer what_web Program webhacking.kr

WEB Informative Low No Reward Created: Aug 2, 2021 (3 years ago) Last Updated: Jul 17, 2022 (2 years ago)

Weakness

Broken Authentication and Session Management

Timeline

what_web submitted ticket. August 2, 2021 (3 years ago)
rubiya MANAGER changed the status from 'Submitted' to 'In Progress'. August 2, 2021 (3 years ago)
rubiya MANAGER posted a comment. August 2, 2021 (3 years ago)
rubiya MANAGER changed the status from 'In Progress' to 'Informative'. August 2, 2021 (3 years ago)
rubiya MANAGER changed the disclosure from 'Closed' to 'Disclosed (Limited)'. August 2, 2021 (3 years ago)