Limit UI active session life span [New in Security Center 1.3]

  • Release version: Washingtondc
  • Updated February 21, 2024
  • 1 minute to read
  • The glide.ui.active.session.life_span property enforces max lifespan on active authenticated HTTP sessions irrespective of inactive timeout.

    The configured value is in minutes. A value of zero will disable timing out the active sessions.

    More information

    Attribute Description
    Configuration name glide.ui.active.session.life_span
    Configuration type System Properties (/sys_properties_list.do)
    Data type integer
    Recommended value 1-720
    Default value 0
    Category Session management
    Security risk
    • Severity score: 4.2
    • CVSS score: Medium
    • Security risk details: A larger maximum lifespan could allow an attacker to remain in a stolen session longer, increasing the possibility of a security incident.
    Dependencies and prerequisites None
    Functional impact Enforces max life-span on active authenticated HTTP sessions irrespective of inactive timeout. The configured value is in minutes. A value of zero will disable timing out the active sessions. The max life-span should be more than inactive timeout glide.ui.session_timeout (default 30 minutes).