An attacker may attempt to re-use an identity token that was acquired for another client or for another authorization session.
OpenID Connect Core 1.0 incorporating errata set 1 (OIDC, section 2)
This threat is considered fully mitigated if all the test cases from the following test set succeed.
The impact factor is a measure that indicates how important a given countermeasure is towards mitigating a threat.
Back to the threat overview