CWE-6: J2EE Misconfiguration: Insufficient Session-ID Length

The J2EE application is configured to use an insufficient session ID length.

A kind of CWE-334 Small Space of Random Values.

From the CWE List. © The MITRE Corporation.

Newest

• eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity management plug-ins +10 more +12 more Access and integrity issue within Eclipse Jetty CVE-2018-12538 Fix available 8.8 HighJune 22, 2018