V-222582
Application Security and Development Security Technical Implementation Guide
Title
The application must not re-use or recycle session IDs.
Description
<VulnDiscussion>Many web development frameworks such as PHP, .NET, and ASP include their own mechanisms for session management. Whenever possible it is recommended to utilize the provided session management framework. Session identifiers are assigned to application users so they can be uniquely identified. This allows the user to customize their web application experience and also allows the developer to differentiate between users thereby providing the opportunity to customize the user’s featu...
Fix Text (Documentation Requirement)
Design the application to not re-use session IDs.