title: [20240201] - Core - Insufficient session expiration in MFA management views
description: The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified.
problem types: CWE-613 Insufficient Session Expiration
affected:
{
defaultStatus: unaffected
product: Joomla! CMS
vendor: Joomla! Project
versions:
status: affected, version: 3.2.0-3.10.14
status: affected, version: 4.0.0-4.4.2
status: affected, version: 5.0.0-5.0.2
}