Hello Drupal Team,

we are facing session fixation issue in drupal site, we are using drupal 7.26 version, our issue: we are doing login in one browser and copying cookie value from browser and then if we paste that cookie value in other browser, we are able to access admin panel in that different browser without login.
Please have a look on it as it is very critical issue of session fixation.

Comments

shivanshuag’s picture

shivanshuag CreditAttribution: shivanshuag commented
Status: Active » Closed (won't fix)

Hi,
This is the wrong place to post this issue. I think that this issue belongs to drupal core issue queue.