Re: SAP Logon Ticket and System Failover

Thanks for the information. If that's the case, then if I inject a valid MYSAPSSO2 cookie to a totally different session, it will be authenticated automatically, right?

So there is a possibility of session hijacking.