Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated users to gain privileges as other users.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Coldfusion | Macromedia | 6.1 | 6.1 |
| Coldfusion | Macromedia | 7.0 | 7.0 |
| Jrun | Macromedia | 4.0 | 4.0 |