CWE-613
Insufficient Session Expiration
According to WASC, Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.
Impactr finds and proves whether CWE-613 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.