Applications must validate session identifiers.
An XCCDF Rule
Description
Many web development frameworks such as PHP, .NET, and ASP include their own mechanisms for session management. Whenever possible it is recommended to utilize the provided session management framework.
- ID
- SV-222580r1043180_rule
- Version
- APSC-DV-002260
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the application to configure user session identifiers.