CVE-2008-5809

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-01-02 · updated 2026-06-16
Weakness: CWE-287

Description

futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id.

Affected products

Futomi Access Analyzer Cgi: through 4.0.1; _nil_-beta1, _nil_-beta2, 1.0, 1.1, 1.2, 1.3 (+40)

References

http://jvn.jp/en/jp/JVN07468800/index.html
http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000083.html
http://www.futomi.com/library/info/2008/20081212.html
http://www.securityfocus.com/bid/32794
http://jvn.jp/en/jp/JVN07468800/index.html
http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000083.html
http://www.futomi.com/library/info/2008/20081212.html
http://www.securityfocus.com/bid/32794

Get alerted when CVE-2008-5809 or the next vulnerability affects your stack