CVE-2008-5809: Futomi Access Analyzer Cgi

Medium severity, CVSS 5.8. EPSS: 1% chance of exploitation in the next 30 days.

futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id.

Affected products

• Futomi Access Analyzer Cgi: up to and including 4.0.1; version _nil_ only; version 1.0 only; version 1.1 only; version 1.2 only; version 1.3 only; …

Published 2009-01-02. Last modified 2026-06-16.