Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.
{ "cwe_ids": [ "CWE-840" ] }