WARN [SessionFixationProtectionStrategy] Your servlet container did not change the session ID when a new session was created. You will not be adequately protected against session-fixation attacks

asked 2014-03-27 06:57:39 +0800

Ashutosh
1

updated 2014-03-27 07:17:02 +0800

sitansu
2254 ● 13
http://java91.blogspot.in...

I use jboss server for zk to run. I use spring for login and bean injection. When i login i get following message on

WARN  [SessionFixationProtectionStrategy] Your servlet container did not change the session ID when a new session was created. You will not be adequately protected against session-fixation attacks.

What is the problem ??

Please reply.

Thanks in advance.