title: Login session transferred to other user
body: <p>I have kind of a strange problem. I have build a web application in Lucee. You need to login to use web application. It has happened, at least twice, that a login session has been transferred to an other user. To clarify what happen:</p>
  
  <ol>
  <li>User 1 is logged in the application, the session is active</li>
  <li>User 2 goes to the web application and is automatically logged in and sees "welcome to the application user 1".</li>
  </ol>
  
  <p>As mentioned above this has happened at least twice since the application is live, so it sounds like an incident. Security wise this is a big problem because user 1 is an administrator and user 2 has a basic access profile.</p>
  
  <p>My question: does anyone recognize this issue and can someone give my some advice how to troubleshoot this problem.</p>
  
  <p>Thanks</p>