Activate Limit Concurrent Sessions Plugin
Configure the com.glide.limit.concurrent.sessions plugin to reduce the chance of session hijacking on your instance.
The Limit Concurrent Sessions plugin (com.glide.limit.concurrent.sessions) allows an administrator to limit the number of active sessions per user/role. It is recommended this plugin be enabled and configured to reduce the likelihood of session hijacking. If this plugin is enabled and configured, there will be a limit to the number of open sessions that can be hijacked.
More information
| Attribute | Description |
|---|---|
| Configuration name |
|
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | - plugin - system property \(Boolean\) - system property \(Integer\) plugin |
| Recommended value |
|
| Default value | None |
| Category | Session management |
| Security risk | - Severity score: 3.7 - CVSS score: Low - Security risk details: Higher numbers of active concurrent sessions creates security risk by increasing the attack surface for account compromise, making it harder to detect unauthorized access and enforce session accountability across devices and locations. |
| Dependencies and prerequisites | None |
Parent Topic:Session management