Session hijacking
Stealing or reusing a valid login session token so an attacker can act as an already-authenticated user without needing the password.
Stealing or reusing a valid login session token so an attacker can act as an already-authenticated user without needing the password.