Common Weakness Enumeration

    CWE Definition / CWE-1466

    CWE-1466: Improper Session Invalidation after Authentication Credential Change

    The product provides a capability for users to change their authentication credentials, such as username or password, but it does not properly invalidate any current authenticated sessions after this authentication credential change.

    Published:23 Oct 2026
    Organization:
    Modified:N/A

    Related Weakness

    CWE-1464: Improper Session Invalidation

    CWE-1466: Improper Session Invalidation after Authentication… | CVE-DB