Hello all,

Is there something in Tomcat that stops an adversary from guessing someone else session-id and preform
a session hijacking?

thanks.

Bill