Tag: CWE- 6

Description The J2EE application is configured to use an insufficient session ID length. If an attacker can guess or steal a session ID, then they...