CVE-2023-29298

Adobe ColdFusion Improper Access Control Vulnerability

Coldfusion

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.

12. Jul 2023

Ausgewertete Quellen

• Hersteller
  https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29298
• CISA
  Adobe ColdFusion Improper Access Control Vulnerability
• NVD
  CVE-2023-29298