CVEvulnerability
CVE-2008-5809
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-01-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-287
Description
futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id.
Affected configurations
• futomi access analyzer cgi (<= 4.0.1)
• futomi access analyzer cgi nil
• futomi access analyzer cgi 1.0
• futomi access analyzer cgi 1.1
• futomi access analyzer cgi 1.2
• futomi access analyzer cgi 1.3
• futomi access analyzer cgi 1.4
• futomi access analyzer cgi 1.5
• futomi access analyzer cgi 1.6
• futomi access analyzer cgi 1.7
• futomi access analyzer cgi 2.0
• futomi access analyzer cgi 2.1
• futomi access analyzer cgi 2.2
• futomi access analyzer cgi 2.3
• futomi access analyzer cgi 2.4
• futomi access analyzer cgi 3.0
• futomi access analyzer cgi 3.1
• futomi access analyzer cgi 3.2
• futomi access analyzer cgi 3.3
• futomi access analyzer cgi 3.4
• futomi access analyzer cgi 3.5
• futomi access analyzer cgi 3.6
• futomi access analyzer cgi 3.7
• futomi access analyzer cgi 3.8
• futomi access analyzer cgi 3.8.1
• futomi access analyzer cgi 4.0
• futomi access analyzer cgi 4.0.0
• futomi access analyzer cgi 4.1
• futomi access analyzer cgi 4.2
• futomi access analyzer cgi 4.3
• futomi access analyzer cgi 4.4
• futomi access analyzer cgi 4.5
• futomi access analyzer cgi 4.6
• futomi access analyzer cgi 4.7
• futomi access analyzer cgi 4.8
• futomi access analyzer cgi 4.9
• futomi access analyzer cgi 4.10
• futomi access analyzer cgi 4.10.1
• futomi access analyzer cgi 4.10.2
• futomi access analyzer cgi 4.10.3
• futomi access analyzer cgi 4.10.4
• futomi access analyzer cgi 4.10.5
• futomi access analyzer cgi 4.11.0
• futomi access analyzer cgi 4.11.1
• futomi access analyzer cgi 4.11.2
• futomi access analyzer cgi 4.11.3
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://jvn.jp/en/jp/JVN07468800/index.html jvn.jp
- http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000083.html jvndb.jvn.jp
- http://www.futomi.com/library/info/2008/20081212.html Vendor Advisory
- http://www.securityfocus.com/bid/32794 www.securityfocus.com
- http://jvn.jp/en/jp/JVN07468800/index.html jvn.jp
- http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000083.html jvndb.jvn.jp
- http://www.futomi.com/library/info/2008/20081212.html Vendor Advisory
- http://www.securityfocus.com/bid/32794 www.securityfocus.com