PT-2011-2471

CVE-2011-0584

Published

2011-02-10

Updated

2017-08-17

CVSS 2.0

4.3

Medium

MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 8.0 through 9.0.1

Description A session fixation issue allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified.

Recommendations For Adobe ColdFusion versions 8.0 through 9.0.1, update to a version that contains a fix for this issue.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾