CWE-1466: Improper Session Invalidation after Authentication Credential Change
The product provides a capability for users to change their authentication credentials, such as username or password, but it does not properly invalidate any current authenticated sessions after this authentication credential change.
A kind of CWE-1464 Improper Session Invalidation.
From the CWE List. © The MITRE Corporation.