Which of the following is not session layer vulnerability?

• A. Mishandling of undefined, poorly defined
• B. Spoofing and hijacking of data based on failed authentication attempts
• C. Passing of session-credentials allowing intercept and unauthorized use
• D. Weak or non-existent authentication mechanisms