https://bugzilla.redhat.com/show_bug.cgi?id=1785711
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
It was found that tomcat's FORM authentication allowed a very small period in which an
attacker could possibly force a victim to use a valid user session, or Session Fixation.
While practical exploit of this issue is deemed highly improbable, an abundance of caution
merits it be considered a flaw. The highest threat from this vulnerability is to system
availability, but also threatens data confidentiality and integrity.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1785711