Common Weakness Enumeration

    CWE Definition / CWE-1465

    CWE-1465: Improper Session Invalidation after User Logout

    The product provides a logout functionality or otherwise attempts to end an active session for a user, but it does not properly invalidate the session upon logout.

    Published:23 Oct 2026
    Organization:
    Modified:N/A

    Related Weakness

    CWE-1464: Improper Session Invalidation

    CWE-1465: Improper Session Invalidation after User Logout | CVE-DB