A new detector, Suspicious Clustered Session Support, looks for methods that access objects in http sessions, that are complex objects, modifies those objects, but does not call setAttribute to signify a change so that cluster replication can happen correctly.