QwikSec

Security Database

CVE

CWE

Training

CVE-2007-5905

Published: Nov 15, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

coldfusion-cfid-cftoken-session-hijacking(38446)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SECUNIA

http://www.adobe.com/support/security/bulletins/apsb07-19.html

x_refsource_CONFIRM

vdb-entry

x_refsource_OSVDB

vdb-entry

x_refsource_SECTRACK

http://www.adobe.com/go/kb402805

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.