Server-side session management: session IDs invalidated upon logout proposed
MITIG173 · Proposed: Not in place yet. Being considered. · Defined in mitigations.py:514
Threats it mitigates
No threat lists this mitigation.
Possible further mitigation for
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Session management vulnerability in Journalist interface THREAT7 | mitigated | 6 medium | 6 medium |
| Session management vulnerability in Source interface THREAT19 | mitigated | 4 medium | 4 medium |