tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ravi Pachipala <rpachip...@everypath.com>
Subject RE: tomcat session sharing problem
Date Tue, 04 Nov 2003 16:26:43 GMT
Sorry if this is the wrong alias. I am a developer and am trying to look
into tomcat code to determine the source of problem.

Is this problem fixed in 4.1.29? I don't see any bug reports for this.

Ravi

-----Original Message-----
From: Remy Maucherat [mailto:remm@apache.org]
Sent: Tuesday, November 04, 2003 7:54 AM
To: Tomcat Developers List
Subject: Re: tomcat session sharing problem


Ravi Pachipala wrote:

> We are using tomcat 4.1.24 and we found a particular problem where user A
in
> one session is seeing user Bs information who logged in a different user
in
> tomcat.
> 
> We investigated this further and found that at the time this happened,
there
> was an exception in tomcat as follows. Both user A and B are logged in at
> the same time and exception happens wen userA's session makes a
> request.getParameters() call. Has anyone seen this? This is potentially a
> very dangerous scenario  in production environments.

I think you should try TC 4.1.29 or 5.0.14.
(please post that kind of message on tomcat-user)

Rémy



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message