CWE-1463: Insufficient Session Timeout Value
The product establishes an authenticated user session, but it does not properly set a timeout for the session. That is, the timeout is set to an excessively large value or is not set at all.
A kind of CWE-1462 Improper Session Management.
From the CWE List. © The MITRE Corporation.