An unattended session occurs when a user leaves a host during an active session. This is a security vulnerability because the session remains authenticated and accessible without the authorized user present. An intruder could then access the session or perform actions under the stolen identity. The other options describe different scenarios: improper termination, intruder session hijacking, and failed login attempts - none of which define an unattended session.