Trustwave won't give a Passing PCI

[BlueBanana]

The error is as follows

The remote web application is using predictable cookie-based session IDs. Ideally, session IDs are randomly generated numbers that cannot be guessed by attackers. If the session ID is predictable, an attacker could hijack an active victim's session, allowing the attacker to interact with the server as though they were the victim. If the session ID is used to track the state of authentication, the session ID of an authenticated user could be guessed, bypassing any need for a username or password.

CAn this be corrected somewhere ? or DIsputed to PCI Trustwave ?

[Jamie]

If you open a helpdesk ticket and provide access to your site and your trustwave scan report we can look into it.