CVE-2007-5905: Medium severity Adobe ColdFusion vulnerability
Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5905?
CVE-2007-5905 is considered to have a high severity due to the potential for remote session hijacking.
How do I fix CVE-2007-5905?
Fixing CVE-2007-5905 involves updating Adobe ColdFusion to the latest version and ensuring proper session management practices.
What versions are affected by CVE-2007-5905?
CVE-2007-5905 affects Adobe ColdFusion versions 8.0 and 7.0.
What kind of attack does CVE-2007-5905 facilitate?
CVE-2007-5905 facilitates session hijacking attacks due to the mishandling of session cookies.
Is there a known workaround for CVE-2007-5905?
There is no specific workaround for CVE-2007-5905; the recommended action is to update your ColdFusion installation.