[PCI DSS 1.x] 6.5.3 Broken authentication and session management (use of account credentials and session cookies)

6.5.3 Malicious use of account credentials and session cookies