CWE-1465: Improper Session Invalidation after User Logout

The product provides a logout functionality or otherwise attempts to end an active session for a user, but it does not properly invalidate the session upon logout.

A kind of CWE-1464 Improper Session Invalidation.

From the CWE List. © The MITRE Corporation.