Security risks with session attributes

Hi all,I was wondering if there were any security risks that are know while using session attributes.Is there a way for a hacker to read them?THanksAdam
[194 byte] By [adamrau] at [2007-9-26 3:01:20]
# 1
I would seriously doubt it since all session data is located physically on the server. Even if a hacker broke into your site, they'd have to read the session data from RAM, which is almost impossible.
jpardi at 2007-6-29 10:59:19 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...