CVE-2004-2182: High severity adobe jrun vulnerability
Published Dec 31, 2004
·Updated
Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server.
Affected Software
4 affected components
Macromedia JRun=4.0-sp1a
Macromedia JRun=4.0-sp1
Macromedia JRun=4.0
Macromedia JRun=4.0_build_61650
Event History
Dec 31, 2004
CVE Published
05:00 AM
Jul 10, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2182?
CVE-2004-2182 is considered a critical vulnerability due to its potential to allow remote attackers to hijack user sessions.
2
How do I fix CVE-2004-2182?
To fix CVE-2004-2182, upgrade to the latest version of Macromedia JRun that addresses this vulnerability.
3
What software is affected by CVE-2004-2182?
CVE-2004-2182 affects Macromedia JRun versions 4.0, 4.0-sp1, 4.0-sp1a, and 4.0_build_61650.
4
What type of vulnerability is CVE-2004-2182?
CVE-2004-2182 is a session fixation vulnerability.
5
Can CVE-2004-2182 lead to data breaches?
Yes, CVE-2004-2182 can lead to data breaches as attackers can hijack user sessions and potentially access sensitive information.