CVE-2007-5905

CVE-2007-5905 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability.

Learn more about our Web Application Penetration Testing UK.