CVE-2007-5905
medium · 6.8Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability.
6.8
CVSS
13.1%
EPSS (exploit prob.)
96th
EPSS percentile
2007-11-15
Published
AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-255
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| adobe | coldfusion | 7.0 |
| adobe | coldfusion | 8.0 |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/41478
- http://secunia.com/advisories/27644
- http://securitytracker.com/id?1018944
- http://www.adobe.com/go/kb402805
- http://www.adobe.com/support/security/bulletins/apsb07-19.html
- http://www.securityfocus.com/bid/26429
- http://www.vupen.com/english/advisories/2007/3859
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38446
- http://osvdb.org/41478
- http://secunia.com/advisories/27644
- http://securitytracker.com/id?1018944
- http://www.adobe.com/go/kb402805
- http://www.adobe.com/support/security/bulletins/apsb07-19.html
- http://www.securityfocus.com/bid/26429
- http://www.vupen.com/english/advisories/2007/3859
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38446
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-5905