It's a fault with the application. It means the internal HttpSession object was invalidated, ie invalidate was called, and the application then tried to call HttpSession.getAttribute(".."). One should check the session is valid before using it, or at least, not call invalidate then getAttribute.
_______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org "Where the Answers Are, and have been for 20 years"