You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@tomcat.apache.org by Jeremy Santos <to...@yahoo.com> on 2001/10/11 01:46:29 UTC

Security with JSessionID

Hi,

I've looked thru the archive and I can't seem to find the answer to this
one.  So I'll just post it...

I'm using Tomcat 3.2.3, and apparently, if I can steal someone's
JSESSIONID... I can hack into his account eventually and get all crucial
information.

Is there a fix for this?  Any additional information would be greatly
appreciated.

Thanks
jk


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com