Skip to content

Commit

Permalink
Fix inconsistent tag
Browse files Browse the repository at this point in the history
  • Loading branch information
tghosth authored and elarlang committed Jan 9, 2025
1 parent 85b8fdb commit d2a4aec
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion 5.0/en/0x12-V3-Session-management.md
Original file line number Diff line number Diff line change
Expand Up @@ -105,7 +105,7 @@ For stateful session mechanisms, termination typically involves invalidating the
| # | Description | L1 | L2 | L3 | CWE |
| :---: | :--- | :---: | :---: | :---: | :---: |
| **3.8.1** | [MODIFIED, MOVED FROM 3.3.1] Verify that logout and expiration terminate the user's session, such that the back button or a downstream relying party cannot resume an authenticated session. |||| 613 |
| **3.8.2** | [MODIFIED, LEVEL L2 > L1, MOVED FROM 3.3.3] Verify that the application gives the option to terminate all other active sessions after a successful change or removal of any authentication factor (including password change via reset or recovery and, if present, an MFA settings update). |||| 613 |
| **3.8.2** | [MODIFIED, MOVED FROM 3.3.3, LEVEL L2 > L1] Verify that the application gives the option to terminate all other active sessions after a successful change or removal of any authentication factor (including password change via reset or recovery and, if present, an MFA settings update). |||| 613 |
| **3.8.3** | [ADDED] Verify that all pages that require authentication have easy and visible access to logout functionality. | ||| |
| **3.8.4** | [ADDED] Verify that the application terminates all active sessions when a user account is disabled or deleted (such as an employee leaving the company). |||| 613 |
| **3.8.5** | [ADDED] Verify that application administrators are able to terminate active sessions for an individual user or for all users. |||| 613 |
Expand Down

0 comments on commit d2a4aec

Please sign in to comment.