CX Session_Fixation @ root/register.jsp [main]

[wwesleyalves]

Session_Fixation issue exists @ root/register.jsp in branch main

*Method session.setAttribute at line 34 of root\register.jsp performs user authentication without terminating existing sessions. This may enable Session Fixation.Similarity ID: 1886775474

Method session.setAttribute at line 35 of root\register.jsp performs user authentication without terminating existing sessions. This may enable Session Fixation.Similarity ID: 1443036914

Method session.setAttribute at line 36 of root\register.jsp performs user authentication without terminating existing sessions. This may enable Session Fixation.Similarity ID: 136596402*

Severity: Medium

CWE:384

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 34 35 36

---

Code (Line #34):

session.setAttribute("username", username);

---

Code (Line #35):

session.setAttribute("usertype", "USER");

---

Code (Line #36):

session.setAttribute("userid", userid);

---

[wwesleyalves]

Issue still exists.