Secunia

A security issue has been reported in JRun, which can result in malicious users gaining access to another user's session.

The problem is caused due to a race condition where JRun in certain situations during heavy load may generate the same authentication token for two different sessions. This may allow a malicious authenticated user to access another user's session.

The security issue affects the following versions:
* ColdFusion MX 7.0 Enterprise Multi-Server Edition
* ColdFusion MX 6.1 Enterprise with JRun
* JRun 4.0

Solution
Apply patch:
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Greg Ball, University of Virginia.

Changelog
Further details available in Customer Area

Original Advisory
Macromedia:
http://www.macromedia.com/devnet/security/security_zone/mpsb05-05.html

Deep Links
Links available in Customer Area