Skip to content
ImpactrStart an engagement

CWE-6

J2EE Misconfiguration: Insufficient Session-ID Length

The J2EE application is configured to use an insufficient session ID length.

Official CWE-6 definition at MITRE

Impactr finds and proves whether CWE-6 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.

Start an engagement
← CWE database