In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.
In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.