CWE-1464: Improper Session Invalidation
The product establishes a session for an authenticated user, but it does not properly invalidate or terminate the session when it is required.
A kind of CWE-1462 Improper Session Management.
From the CWE List. © The MITRE Corporation.