PM23579: JSESSIONID COOKIE NOT CORRECTLY REVOKED ON LOGOUT

APAR status

• Closed as program error.

Error description

• The JSESSIONID cookie is to be revoked upon logout, but the
  cookie modification code does not always set the correct cookie
  path. In this case, browsers will ignore the cookie change and
  send the outdated cookie in further requests. With external
  security authentication, this can lead to misinterpretation of
  a session timeout scenario so that portal session suspend and
  resume is not triggered during login.
  

Local fix

• NA
  

Problem summary

• The JSESSIONID cookie is to be revoked upon logout, but the
  cookie modification code does not always set the correct cookie
  path. In this case browsers will ignore the cookie change and
  send the outdated cookie in further requests. With external
  security authentication, this can lead to misinterpretation of a
  session timeout scenario so that portal session suspend and
  resume is not triggered during login.
  

Problem conclusion

• The path entry for cookie modification is correctly handled with
  this APAR.
  
  Failing Module(s):
     Authorization/Authentication (login/logout)
  
  Affected Users:
     All users
  
  Version Information:
  
  PM23579 is part of Cumulative Fix 09 for Portal 6.1.0.3 /
  6.1.5.0:
  
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde
  r?apar=PM22177&productid=WebSphere%20Portal&brandid=5
  
  as well as part of Cumulative Fix 09 for Portal 6.1.0.4 /
  6.1.5.1:
  
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde
  r?apar=PM22188&productid=WebSphere%20Portal&brandid=5
  
  Manuel Steps:
     None
  
  Platform Specific:
     This fix applies to all platforms.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE PORTA

• Fixed component ID

  5724E7600

Applicable component levels

• R615 PSY

     UP

• R61C PSY

     UP