Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated users to gain privileges as other users.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Coldfusion | Macromedia | 6.1 (including) | 6.1 (including) |
| Coldfusion | Macromedia | 7.0 (including) | 7.0 (including) |
| Jrun | Macromedia | 4.0 (including) | 4.0 (including) |