CVE-2007-5905

Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion…

published November 15, 2007

CVSS

—

EPSS

13%

Percentile

96.3

In the wild

Unconfirmed

What it is

Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.13082 · 96.3th percentile
Published: 2007-11-15T20:00Z

EPSS history

Timeline

15 NOV 20:00Z
Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion…
cvelistv5