Description

On changing password both session using which user changes password and old sessions in any other browser or device does not expire and remains active

Proof of Concept

1.Go to https://rdiffweb-dev.ikus-soft.com/login/ and login into same account using browser A and B
2.From Browser B  change password associated with your account
3.Notice that Session on Browser A will remain active and does not expire.