This page is experimental and may change significantly in future releases.
Session Fixation
Properties
id: d3f:CWE-384
- name
- Session Fixation
- definition
- Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.
Neighbors
CWE-384 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-384 has no related weaknesses in this release.