CVE-2019-8072 - ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability

Back Back to CVE browser

HIGH

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability

Published Sep 27, 2019

7.5

HIGH

CVSS 3.1

EPSS 7.35%

Description

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Affected products

Vendor Adobe Product Cold Fusion Default
n/a
- Version
  ColdFusion 2016- update 11 and earlier
  Status
  affected
  Constraints
  -
- Version
  ColdFusion 2018- update 4 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Adobe

Cold Fusion

n/a

Version	Status	Constraints
ColdFusion 2016- update 11 and earlier	affected	-
ColdFusion 2018- update 4 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-17530
Advisory
https://helpx.adobe.com/security/products/coldfusion/apsb19-47.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-17530		Advisory
https://helpx.adobe.com/security/products/coldfusion/apsb19-47.html		x_refsource_CONFIRMVendor Advisory