rspec/rules/S5328/description.adoc

2 lines
176 B
Plaintext
Raw Normal View History

2020-06-30 12:50:28 +02:00
If a session ID can be guessed (not generated with a secure pseudo random generator, or with insufficient length ...) an attacker may be able to hijack another user's session.