ColdFusion CFLOGIN Bug

Macromedia has posted a TechNote about a rather serious problem with the CFLOGIN tag, namely, when you store login information in the session scope, rather than a cookie, the login information can persist beyond logout. The workaround, for now, is to use the default cookie method.