CVE-2009-1878

Adobe Coldfusion < 8.0.1 - Authentication Bypass

Title source: rule

Description

Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors.

Scores

EPSS 0.0028
EPSS Percentile 51.5%

Classification

CWE
CWE-287
Status draft

Affected Products (21)

adobe/coldfusion < 8.0.1
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
adobe/coldfusion
... and 6 more

Timeline

Published Aug 18, 2009
Tracked Since Feb 18, 2026