We store two objects in session. Somehow, one of the objects from another user got loaded into a different user\'s session. The user should have had no access to this partic
Had this problem, turned out to be an OutputCache attribute on a partial view.