VULHUB ™

Allaire JRun is a web application development suite. When a user visits a web application based on JRun, they are given a session id. Under some circumstances this session id will be appended to the URL requested, despite already being stored in a cookie. This may potentially reveal the session id to a remote web server through a referrer tag.

Allaire JRun is a web application development suite. When a user visits a web application based on JRun, they are given a session id. Under some circumstances this session id will be appended to the URL requested, despite already being stored in a cookie. This may potentially reveal the session id to a remote web server through a referrer tag.