Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

3.3.5 - Update to correspond updated 3.3.2 #2172

Closed
ryarmst opened this issue Oct 22, 2024 · 2 comments
Closed

3.3.5 - Update to correspond updated 3.3.2 #2172

ryarmst opened this issue Oct 22, 2024 · 2 comments
Assignees
@ryarmst
Labels
1) Discussion ongoing Issue is opened and assigned but no clear proposal yet 4) proposal for review Issue contains clear proposal for add/change something 5) awaiting PR A proposal hs been accepted and reviewed and we are now waiting for a PR V3 _5.0 - prep This needs to be addressed to prepare 5.0

Comments

@ryarmst
Copy link
Collaborator

ryarmst commented Oct 22, 2024

Following from #2113 and related to #2076, I propose the following update for 3.3.5:

# Description L1 L2 L3 CWE NIST §
3.3.5 [ADDED, SPLIT FROM 3.3.2] Verify that there is an inactivity timeout such that re-authentication is enforced according to risk analysis and documented security decisions. ✓ ✓ ✓
@elarlang elarlang added 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet 4) proposal for review Issue contains clear proposal for add/change something V3 labels Oct 22, 2024
@elarlang
Copy link
Collaborator

Ok for me, let's PR it in.

@elarlang elarlang added the 5) awaiting PR A proposal hs been accepted and reviewed and we are now waiting for a PR label Oct 22, 2024
@tghosth tghosth added the _5.0 - prep This needs to be addressed to prepare 5.0 label Oct 22, 2024
elarlang pushed a commit to elarlang/ASVS that referenced this issue Oct 28, 2024
OWASP#2172 - inactivity timeout based on documentated decisions
a76d74b
elarlang pushed a commit to elarlang/ASVS that referenced this issue Oct 28, 2024
OWASP#2172 - section text is not aligned with content anymore, remove
3bc1b16
@elarlang elarlang mentioned this issue Oct 28, 2024
Merged
tghosth pushed a commit that referenced this issue Oct 28, 2024
@tghosth
#2172 - inactivity timeout based on documentated decisions
eefe623
tghosth pushed a commit that referenced this issue Oct 28, 2024
@tghosth
#2172 - section text is not aligned with content anymore, remove
bf9642d
@elarlang
Copy link
Collaborator

Updated via #2202

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ryarmst ryarmst

Labels
1) Discussion ongoing Issue is opened and assigned but no clear proposal yet 4) proposal for review Issue contains clear proposal for add/change something 5) awaiting PR A proposal hs been accepted and reviewed and we are now waiting for a PR V3 _5.0 - prep This needs to be addressed to prepare 5.0
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@tghosth @ryarmst @elarlang