GSA Bounty: The Federalsit session cookie (federalist.sid) is not properly invalidated - backdoor access to the account is possible
Description Hello. This issue is not very dangerous itself, but can be dangerous in combination of others like XSS, or malicious access to the user account. The user/attacker, who got once valid cookie federalist.sid from the account, can use it as backdoor for some time, because it is not actual...