CVE-2007-5905

Publicada em 15 nov 2007 · Atualizada em 07 ago 2024

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 13%

probabilidade de exploração

13%top 4% das CVEs

exploração observada

nãonenhuma fonte reporta

Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability.

Produtos afetados

n/a · n/a

Referências

http://osvdb.org/41478 http://secunia.com/advisories/27644 http://securitytracker.com/id?1018944 https://exchange.xforce.ibmcloud.com/vulnerabilities/38446 http://www.adobe.com/go/kb402805 http://www.adobe.com/support/security/bulletins/apsb07-19.html http://www.securityfocus.com/bid/26429 http://www.vupen.com/english/advisories/2007/3859