A session fixation vulnerability exists in the WebLogic administration console. Version 10.0 is susceptible.