CX Session_Fixation @ root/login.jsp [main]

[wwesleyalves]

Session_Fixation issue exists @ root/login.jsp in branch main

*Method session.setAttribute at line 22 of root\login.jsp performs user authentication without terminating existing sessions. This may enable Session Fixation.Similarity ID: -1392439330

Method session.setAttribute at line 23 of root\login.jsp performs user authentication without terminating existing sessions. This may enable Session Fixation.Similarity ID: 848165854

Method session.setAttribute at line 24 of root\login.jsp performs user authentication without terminating existing sessions. This may enable Session Fixation.Similarity ID: 818866142*

Severity: Medium

CWE:384

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 22 23 24

---

Code (Line #22):

session.setAttribute("username", rs.getString("name"));

---

Code (Line #23):

session.setAttribute("userid", userid);

---

Code (Line #24):

session.setAttribute("usertype", rs.getString("type"));

---

[wwesleyalves]

Issue still exists.