CX Session_Fixation @ root/logout.jsp [master]

[smmclaughlin]

Session_Fixation issue exists @ root/logout.jsp in branch master

Method session.setAttribute at line 3 of root\logout.jsp performs user authentication without terminating existing sessions. This may enable Session Fixation.

Severity: Medium

CWE:384

Checkmarx

Training Recommended Fix

Lines: 3 4 5

---

Code (Line #3):

session.setAttribute("username", null);

---

Code (Line #4):

session.setAttribute("usertype", null);

---

Code (Line #5):

session.setAttribute("userid", null);

---

[smmclaughlin]

Issue still exists.