Commit 1edb740a37624336bb4b488b4d6fad8889367d33 reversed the order in which SessionListeners are called for sessionDestroyed. However, in DeploymentManagerImpl the SessionListenerBridge is added after Listeners set in the DeploymentInfo (e.g. if you add listeners in a ServletExtension). Therefore these Listeners are called last and SessionListenerBridge has already removed all SessionAttributes.