Skip to content

Instantly share code, notes, and snippets.

@ratnadip1998

ratnadip1998/gist:021ab5ed1b74756f7e0ae038d62a2834

Last active March 16, 2026 19:24
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ratnadip1998/021ab5ed1b74756f7e0ae038d62a2834 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ratnadip1998/021ab5ed1b74756f7e0ae038d62a2834 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
Observation
During testing, it was observed that the application does not enforce proper session timeout. The Super Admin session cookie LWCA_AUTH (JWT) remains valid for multiple days without expiration, indicating a Session Management Vulnerability.
Steps to Reproduce
Login as Super Admin and capture the LWCA_AUTH cookie using Burp Suite.
Reuse the same cookie after several days.
Observe that the application still accepts the cookie and grants access without re-authentication.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment