Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
2009-08-18T22:30:00.390
2025-04-09T00:30:58.490
Deferred
CVSSv2: 5.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:N
8.6
4.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | adobe | coldfusion | ≤ 8.0.1 | Yes |
| Application | adobe | coldfusion | 6.0 | Yes |
| Application | adobe | coldfusion | 6.0 | Yes |
| Application | adobe | coldfusion | 6.0 | Yes |
| Application | adobe | coldfusion | 6.0 | Yes |
| Application | adobe | coldfusion | 6.0 | Yes |
| Application | adobe | coldfusion | 6.1 | Yes |
| Application | adobe | coldfusion | 6.1 | Yes |
| Application | adobe | coldfusion | 6.1 | Yes |
| Application | adobe | coldfusion | 6.1 | Yes |
| Application | adobe | coldfusion | 6.1 | Yes |
| Application | adobe | coldfusion | 7.0 | Yes |
| Application | adobe | coldfusion | 7.0 | Yes |
| Application | adobe | coldfusion | 7.0 | Yes |
| Application | adobe | coldfusion | 7.0 | Yes |
| Application | adobe | coldfusion | 7.0 | Yes |
| Application | adobe | coldfusion | 7.0.1 | Yes |
| Application | adobe | coldfusion | 7.0.2 | Yes |
| Application | adobe | coldfusion | 7.2 | Yes |
| Application | adobe | coldfusion | 8.0 | Yes |
| Application | adobe | coldfusion | 8.1 | Yes |