---
title: There Is No Sessions Time Out For Inactive Users
description: "Impact Area Security Severity Medium Affected Element Org Config ## Rule ID **SF-0167** ## Impact Increased vulnerability to session hijack attacks. ## Remediation Set a timeout value. From Setup, enter “Session Settings” in the Quick Find box, then select Session Settings.…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/salesforce-rules/there-is-no-sessions-time-out-for-inactive-users/"
updated: "2025-03-21"
category: Rules
---

# There Is No Sessions Time Out For Inactive Users

Impact Area

Security

Severity

Medium

           Affected Element

Org Config

## Rule ID

**SF-0167**

## Impact

Increased vulnerability to session hijack attacks.

## Remediation

Set a timeout value. From Setup, enter “Session Settings” in the Quick Find box, then select Session Settings. Then enable “Timeout Value”.

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-613 Insufficient Session Expiration](https://cwe.mitre.org/data/definitions/613.html).