Description
Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated users to gain privileges as other users.
Affected products
- macromedia / coldfusion6.1 – 6.1
- macromedia / coldfusion7.0 – 7.0
- macromedia / jrun4.0 – 4.0