5. of Tampering II

An attacker can replay data without detection because your code doesn’t provide timestamps or sequence numbers:

Threat
	You are using SAML and your authn response doesn’t contain a sequence number or the sequence number isn’t being considered. An attacker can steal the token and can then reuse it to perform actions until it expires.
CAPEC	CAPEC-21: Exploitation of Trusted Identifiers
ASVS	3.5.3: Ensure tokens are signed and encrypted 3.6.1: Ensure users must re-authenticate within a defined timeframe 3.6.2: Ensure relying parties are aware when a user last authenticated
CWE	CWE-613: Insufficient Session Expiration CWE-306: Missing Authentication for Critical Function...