CVE-2018-4939

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Coldfusion

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution.

19. Mai 2018

Ausgewertete Quellen

• Hersteller
  https://helpx.adobe.com/security/products/coldfusion/apsb18-14.html
• Hinweis
  http://www.securityfocus.com/bid/103718
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-4939
• CISA
  Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
• NVD
  CVE-2018-4939