We are using tomcat 4.1.24 and we found a particular problem where user A in one session is seeing user Bs information who logged in a different user in tomcat.
We investigated this further and found that at the time this happened, there was an exception in tomcat as follows. Both user A and B are logged in at the same time and exception happens wen userA's session makes a request.getParameters() call. Has anyone seen this? This is potentially a very dangerous scenario in production environments.
I think you should try TC 4.1.29 or 5.0.14. (please post that kind of message on tomcat-user)
Rémy
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]