Common Weakness Enumeration

    CWE Definition / CWE-1464

    CWE-1464: Improper Session Invalidation

    The product establishes a session for an authenticated user, but it does not properly invalidate or terminate the session when it is required.

    Published:23 Oct 2026
    Organization:
    Modified:N/A

    Related Weakness

    CWE-1462: Improper Session Management

    CWE-1464: Improper Session Invalidation | CVE-DB