CWE-324
Use of a Key Past its Expiration Date
The product uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.
Impactr finds and proves whether CWE-324 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.