Symptom
Session theft or hijacking occurs when an attacker has acquired valid user/session cookies and uses them to bypass authentication controls to gain access to the application with privileges in the context of the victim user’s permission level.
Read more...
Environment
- SAP NetWeaver Java
- SAP Enterprise Portal
Product
SAP NetWeaver all versions
Keywords
session fixation, steal, leverage, re-use, , KBA , BC-JAS-WEB , Web Container, HTTP, JavaMail, Servlets , BC-JAS-SEC , Security, User Management , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview