Session Fixation Vulnerability in JRun 4.0 by Macromedia
CVE-2004-1478

Currently unrated

Key Information:

Vendor: Hitachi
Status: Cosminexus Enterprise; Jrun; Coldfusion; Cosminexus Server
Vendor: CVE Published:; 31 December 2004

What is CVE-2004-1478?

JRun 4.0 is vulnerable due to improper handling of the JSESSIONID, which allows remote attackers to perform session fixation attacks. By exploiting this flaw, attackers can hijack an active user's HTTP session, potentially gaining unauthorized access to sensitive information and applications that the user has permissions to. It is essential for users of JRun 4.0 to apply necessary patches and mitigations to secure their sessions from these types of threats.