Session Id is active even after user logs out.

[Anonymous]

If I capture the Session ID and terminate the session. I am able to access the application data with the earlier captured session Id(after 30 minutes). This is a security threat, any suggestions on how to resolve this

[ToniKautto]

You would need to elaborate a bit more on the details for this scenario. How do you grab the session ID and how do you terminate the session?

You should report any potential security vulnerability to Qlik Support, so that they can be evaluated in details with Qlik R&D as required.