CODEWITHSUNDEEP
asp.netsession-fixation
user8112761
user8112761

Reputation:

Session Fixation vulnerability in ASP.NET

Hi I am getting Session Fixation vulnerability for the below line in my ASP.NET Application.

this.Session["update"] = Server.UrlEncode(System.DateTime.Now.ToString());

Getting this issue more than 100 places since I am using Session["SomeConstant"] in most of places to store value while moving from one page to another.

How to fix this issue? Is it possible to achieve in Global.asax file

Upvotes: 0

Views: 866

Answers (0)

Related Questions