How to avoid the Session fixation vulnerability in ASP.NET?

by: Itfunda Product Type: Tips and Tricks (Books) Technologies: ASP.NET  Security 

ASP.NET Session keeps track of the user by creating a cookie called “ASP.NET_SessionId” in the user browser. This cookie value is checked for every request to ensure that the data being served is specific to that user. In many application, Session variable is used to track the logged in user, ie. If a session variable exists for that user then the User is logged in otherwise not.