Glossary: Application and Credential Attacks, and AI Risks

session fixation

An attack where the attacker plants a session ID they already know before the user signs in, then uses it once the user is signed in. Issuing a new session ID at every sign-in stops it.