ColdFusion Server: How to Guarantee Unique CFToken Values
CFTokens are part of the ColdFusion state management, used to uniquely identify users online. By default, CFTokens are randomly generated long integers. As ColdFusion no longer validates any part of this token, allowing users to reassign this to any value they choose, it is possible for the same CFToken value to be given to more than one user. This TechNote describes a simple change that will guarantee that ColdFusion Server generates globally unique CFTokens.
ColdFusion Server: How to Guarantee Unique CFToken Values