Description

Due to the Improper Access Control vulnerability, an unauthenticated attacker can read arbitrary files in the OS.

Remediation

Upgrade to the latest version of Adobe ColdFusion

References

Security updates available for Adobe ColdFusion | APSB24-14

Related Vulnerabilities

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31049)

Oracle JRE CVE-2013-5831 Vulnerability (CVE-2013-5831)

Oracle Application Server CVE-2007-5526 Vulnerability (CVE-2007-5526)

OpenSSL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2005-2946)

MongoDb CVE-2017-15535 Vulnerability (CVE-2017-15535)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Authentication Bypass Known Vulnerabilities CWE-284 CVE-2024-20767