CVE-2009-1878: Medium severity Adobe ColdFusion vulnerability
Published Aug 18, 2009
·Updated
Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
Affected Software
21 affected components
Adobe ColdFusion=6.0
Adobe ColdFusion=6.1
Adobe ColdFusion=6.0
Adobe ColdFusion=7.0.2
Adobe ColdFusion=7.0
Adobe ColdFusion=6.1
Adobe ColdFusion=8.0
Adobe ColdFusion=7.0
Adobe ColdFusion=6.0
Adobe ColdFusion=7.0
Adobe ColdFusion=6.0
Adobe ColdFusion=7.0
Adobe ColdFusion=7.2-unknown
Adobe ColdFusion=6.1
Adobe ColdFusion<=8.0.1
Adobe ColdFusion=7.0.1
Adobe ColdFusion=6.1
Adobe ColdFusion=7.0
Adobe ColdFusion=6.1
Adobe ColdFusion=8.1
Adobe ColdFusion=6.0
Remediation
Event History
Aug 18, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1878?
CVE-2009-1878 has been classified as a moderate severity vulnerability due to the potential for session hijacking.
2
How do I fix CVE-2009-1878?
To mitigate CVE-2009-1878, it is recommended to upgrade Adobe ColdFusion to version 8.0.1 or later.
3
What systems are affected by CVE-2009-1878?
CVE-2009-1878 affects Adobe ColdFusion versions 6.0 through 8.0.1 across various platforms.
4
What type of vulnerability is CVE-2009-1878?
CVE-2009-1878 is a session fixation vulnerability that allows remote attackers to hijack user web sessions.
5
Can CVE-2009-1878 be exploited remotely?
Yes, CVE-2009-1878 can be exploited remotely without requiring physical access to the affected system.