Which entity is allowed to access Session state variables?

Explanation

Session state variables are specific to a single user session and cannot be shared across different users or tunnels. Therefore, only one individual session has access to its own session state variables.