Skip to main content

Adobe ColdFusion Multiple Vulnerabilities

Last Update Date: 11 Apr 2013 11:21 Release Date: 11 Apr 2013 4046 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

TYPE: Web Servers

Multiple vulnerabilities have been identified in Adobe ColdFusion, which can be exploited by malicious users to bypass certain security restrictions and malicious people to conduct spoofing attacks.

  1. An unspecified error can be exploited to impersonate an authenticated user.
  2. An unspecified error can be exploited to gain access to the ColdFusion administrator console.

Impact

  • Security Restriction Bypass
  • Spoofing

System / Technologies affected

  • Versions 10, 9.0.2, 9.0.1 and 9.0 for Windows, Macintosh and UNIX.

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details. 

  • Apply hotfix.

Vulnerability Identifier


Source


Related Link