Session Fixation Vulnerability in JRun 4.0 by Macromedia
CVE-2004-1478

Currently unrated

Key Information:

Vendor: Hitachi
Status: Cosminexus Enterprise; Jrun; Coldfusion; Cosminexus Server
Vendor: CVE Published:; 31 December 2004

What is CVE-2004-1478?

JRun 4.0 is vulnerable due to improper handling of the JSESSIONID, which allows remote attackers to perform session fixation attacks. By exploiting this flaw, attackers can hijack an active user's HTTP session, potentially gaining unauthorized access to sensitive information and applications that the user has permissions to. It is essential for users of JRun 4.0 to apply necessary patches and mitigations to secure their sessions from these types of threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch