OWASPASVS 5.0 requirement
ASVS-V7.4.3 The application gives the option to terminate all other active sessions after a successful change or removal of any authentication factor…
- Standard
- OWASP ASVS 5.0
- Chapter
- V7 Session Management
- Section
- V7.4 Session Termination
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the application gives the option to terminate all other active sessions after a successful change or removal of any authentication factor (including password change via reset or recovery and, if present, an MFA settings update).