CWE-1462

Improper Session Management

ClassIncompleteSimple

The product does not properly manage user-related sessions such as setting appropriate configurations and settings for sessions on creation and handling sessions throughout their lifetime.

Potential mitigations1

Architecture and DesignImplementationOperation
Very carefully manage user authenticated sessions. Ensure that appropriate timeouts, invalidation procedures, and protections are established.

Relationships1

ChildOfCWE-284

CVEs referencing this CWE

No CVEs reference this CWE yet

CWE assignments come from NVD/CNA assigners and OSS advisories. Some CWEs (Pillars, Composites) are abstract and rarely cited directly.