PI80802: When cookieless session IDs are used the session-detection pattern is not correctly identified

APAR status

• Closed as fixed if next.

Error description

• 1) Expected behavior:
  AppScan should detect In-Session pattern automatically, and
  validate the user detection pattern correctly when using
  "Cookieless Session ID"
  
  
  2) Observed behavior:
      AppScan does not  detect In-Session pattern automatically,
      AppScan wrongly mark user define in-session pattern as not
  correct pattern.
  
  3) Workaround:
      Define in-session pattern manually.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * ASD, ASE                                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * AppScan does not  detect In-Session pattern automatically,   *
  * AppScan wrongly mark user define in-session pattern as not   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• R903 PSY

     UP