F062. Concurrent sessions


The application does not validate the number of active sessions each user has, thus a user can login more than once at the same time. Furthermore, the application does not notify the user when a session has already been initiated nor when a second one commences from a different location.

Copyright © 2021 Fluid Attacks, We hack your software. All rights reserved.