Missing Session Timeout on community.liveperson.com for logged in users

Karthick
Karthick Staff Posts: 40
in Testing Feedback Loop (Internal)
Screenshot 2024-07-29 at 5.27.52 PM.png

Description: The site community.liveperson.com does not implement a session timeout for user sessions. This can lead to potential security risks and a suboptimal user experience due to indefinitely active sessions.

Steps to Reproduce:

  1. Log in to community.liveperson.com.
  2. Remain inactive for an extended period. Example: my logged in session was active for more than a week on the browser..
  3. Observe that the session does not timeout and the user remains logged in.

Expected Behavior: The site should implement a session timeout to automatically log users out after a period of inactivity, enhancing security and user session management.

Actual Behavior: Users remain logged in indefinitely without a session timeout, potentially compromising security.

Recommended Session Timeout Duration:

  • High Security: 15-30 minutes of inactivity
  • General Use: 1-2 hours of inactivity
  • Low Activity: 4-8 hours of inactivity

1
Up
1 votes

Active · Last Updated

Comments

  • Sue
    Sue Administrator Posts: 124

    Thank you. We will take this up with the vendor.

Categories