CWE-1462: Improper Session Management

The product does not properly manage user-related sessions such as setting appropriate configurations and settings for sessions on creation and handling sessions throughout their lifetime.

A kind of CWE-284 Improper Access Control.

From the CWE List. © The MITRE Corporation.