Glossary: Web App Security and Authentication

Session fixation

Planting a session id the attacker knows in a victim's browser and waiting for sign-in. The fix is a new session at every login.