NVD

Id
57930  
Name
CVE-2007-5905  
Description
Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-11-15  
Modified Date
2011-03-07  
Seq
2007-5905  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
296569 57930 CVE-2007-5905 1018944  View
296570 57930 CVE-2007-5905 http://www.adobe.com/go/kb402805  View
296571 57930 CVE-2007-5905 http://www.adobe.com/support/security/bulletins/apsb07-19.html  View
296572 57930 CVE-2007-5905 26429  View
296573 57930 CVE-2007-5905 ADV-2007-3859  View
296574 57930 CVE-2007-5905 coldfusion-cfid-cftoken-session-hijacking(38446)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54190 JVNDB-2007-002882 Adobe ColdFusion におけるセッションハイジャックの脆弱性 Adobe ColdFusion には、(1) CFID または (2) CFTOKEN クッキーが空の値を有する不備があるため、セッションをハイジャックされる脆弱性が存在します。 CVE-2007-5905 29260 CVE-2007-5905 57930 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002882.html 2007-11-13 2012-06-26 View