NIST 800-53 r5 · Controls catalogue · Family AC
AC-12Session Termination
Automatically terminate a user session after {{ insert: param, ac-12_odp }}.
Last updated: 20 August 2026 20:22 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (6)
Weaknesses this control addresses (2)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-613 | Insufficient Session Expiration | 600+ | Automatically terminating sessions after a defined period directly enforces session expiration, preventing indefinite session lifetimes that attackers can exploit. |
CWE-384 | Session Fixation | 400+ | Session termination after a set interval shortens the usable lifetime of a fixed session identifier, making successful exploitation of session fixation more difficult. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2024-42447 UPD | 7.5 | 9.8 | 0.0093 | good |
CVE-2024-13996 | 7.5 | 9.8 | 0.0099 | good |
CVE-2024-25718 UPD | 7.4 | 9.8 | 0.0066 | good |
CVE-2024-29401 UPD | 7.4 | 9.8 | 0.0078 | good |
CVE-2024-8888 UPD | 7.4 | 10.0 | 0.0042 | good |
CVE-2026-26342 | 7.4 | 9.8 | 0.0072 | good |
CVE-2024-43685 UPD | 7.3 | 9.8 | 0.0044 | good |
CVE-2024-13280 UPD | 7.3 | 9.8 | 0.0041 | good |
CVE-2025-53826 UPD | 7.3 | 9.8 | 0.0050 | good |
CVE-2025-59841 UPD | 7.3 | 9.8 | 0.0039 | good |
CVE-2025-54592 | 7.3 | 9.8 | 0.0050 | good |
CVE-2026-21622 UPD | 7.3 | 9.8 | 0.0039 | good |
CVE-2026-46455 | 7.3 | 9.8 | 0.0043 | good |
CVE-2026-28564 | 7.3 | 9.8 | 0.0044 | good |
CVE-2026-14950 | 7.3 | 9.8 | 0.0055 | good |
CVE-2026-1435 | 7.2 | 9.8 | 0.0037 | good |
CVE-2025-59786 | 7.2 | 9.8 | 0.0025 | good |
CVE-2024-35049 UPD | 7.0 | 9.1 | 0.0073 | good |
CVE-2024-29070 UPD | 7.0 | 9.1 | 0.0079 | good |
CVE-2024-48827 UPD | 7.0 | 8.8 | 0.0279 | good |
CVE-2024-27455 UPD | 6.9 | 9.1 | 0.0065 | good |
CVE-2025-57735 UPD | 6.9 | 9.1 | 0.0067 | good |
CVE-2021-35473 UPD | 6.8 | 9.1 | 0.0041 | good |
CVE-2025-24859 UPD | 6.8 | 8.8 | 0.0108 | good |
CVE-2025-56643 UPD | 6.8 | 9.1 | 0.0036 | good |