MCQ: How can attackers exploit misconfigurations related to insufficient session management in web applications?

• A. Insufficient session management has no impact on security
• B. By intercepting and modifying secure session management mechanisms
• C. By exploiting the lack of proper session management, allowing unauthorized access to user sessions
• D. Security misconfigurations related to session management automatically resolve themselves over time