topic Re: Session Id is active even after user logs out. in Management & Governance

Session Id is active even after user logs out.

Anonymous — Wed, 14 Nov 2018 14:32:22 GMT

If I capture the Session ID and terminate the session. I am able to access the application data with the earlier captured session Id(after 30 minutes). This is a security threat, any suggestions on how to resolve this

Re: Session Id is active even after user logs out.

ToniKautto — Mon, 18 Feb 2019 06:26:04 GMT

You would need to elaborate a bit more on the details for this scenario. How do you grab the session ID and how do you terminate the session?

You should report any potential security vulnerability to Qlik Support, so that they can be evaluated in details with Qlik R&D as required.