tracker issue : CF-3710215

select a category, or use search below
(searches all categories and all time range)
Title:

Problems With Concurrent Logins Using CFLOGIN in ColdFusion 10

| View in Tracker

Status/Resolution/Reason: Closed/Withdrawn/Duplicate

Reporter/Name(from Bugbase): Rajiv Giri / Rajiv Giri (Rajiv Giri)

Created: 02/19/2014

Components: Security

Versions: 10.0

Failure Type: Usability Issue

Found In Build/Fixed In Build: Final /

Priority/Frequency: Major / All users will encounter

Locale/System: English / Windows 7 SP1 64-bit

Vote Count: 0

Duplicate ID:	CF-3339008

Problem Description: This is the same issue as #3339008, which is marked as fixed in Build 284805. However, I have the latest build installed (287689) and am still getting the issue. Essentially concurrent logins aren't allowed in CF 10.

Steps to Reproduce: If you were to login to the site on FIREFOX, and then login to the site using the same username on CHROME.

Actual Result: Upon successful login in CHROME, you lose the authenticated session on FIREFOX.

Expected Result: You should be able to login to both browsers.

Any Workarounds: Not really. You can add session.CFID to the name in CFLOGINUSER, and then use #ListFirst(GetAuthUser())# to get the username, but we use GetAuthUser() is hundreds of templates shared between various parts of our app, so it would be a big change that would take a lot of time to test.

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	3710215

External Customer Info:
External Company:  
External Customer Name: majorsaab21
External Customer Email:  
External Test Config: My Hardware and Environment details: 



Version  10,0,13,287689  

Tomcat Version  7.0.23.0  

Operating System  Windows Server 2008 R2    

OS Version  6.1

Attachments:

Comments:

This bug has been fixed. Allowing concurrent logins using cflogin is a security feature/enhancement added in coldfusion 11.
Comment by S V.
13495 | May 06, 2014 12:40:43 AM GMT