Forum Discussion
SSHSSH_97332
Nimbostratus
Nov 22, 2013Application Simultanoues session logon
Which ASM violation check protects against this vulnerability "Application Simultanoues session logon" ? description for this vulnerability is below :
If application allow simultaneous logons for the same user, from same client IP address. User Session on a particular system will not terminate if any one of the session/browser is open.
A malicious user who has physical access to the system could gain access to an already active session and perform actions as a legitimate user.
1 Reply
- SSHSSH_97332
Nimbostratus
Any One ?
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects