RE: Rsecurity breach on tomcat 6.0.26

2011-10-11 Thread Caldarale, Charles R
> From: zach Li [mailto:zach...@hotmail.com] > Subject: Rsecurity breach on tomcat 6.0.26 > one user screen(or input) totallly showing up on the different user screen. Your webapp is most likely storing references to the request or response objects in static or instance fields of a se

Rsecurity breach on tomcat 6.0.26

2011-10-11 Thread zach Li
Hi, we are using tomcat 6.0.26 to host a java application. but recently we are experiencing security breach once or twice a week. the issue we are facing is: one user screen(or input) totallly showing up on the different user screen. Those screens have customer sensetive information. Anyo