Password Reset Does Not Log Out Existing Sessions, Allowing Persistent Unauthorized Access

Summary