Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Whitepaper "SESSION RIDING - A Widespread Vulnerability in Today's Web Applications" Dec 22 2004 06:04PM
Florian Weimer (fw deneb enyo de)
* Yvan G. J. Boily:

> This name for the issue is misleading; this is a state management
> issue combined with a session management issue.

I don't quite agree. Some developers use stateless authentication
methods specifically to avoid the pitfalls of improper session
management (and session token...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus