Skip to content
OpenAdvisories
High NCSC-2024-0256 2 CVEs

Kwetsbaarheden verholpen in Adobe ColdFusion

Published Jun 13, 2024 · Updated Jun 13, 2024 · nl

Vendor: Adobe Product: ColdFusion 2023 Product: coldfusion_2021

Summary

Adobe heeft kwetsbaarheden verholpen in ColdFusion.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om een beveiligingsmaatregel te omzeilen en toegang te krijgen tot gevoelige gegevens.

Oplossingen
Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 2

  • High 7.5
    CVE-2024-34112 EPSS 24%

    ColdFusion CFDOCUMENT file retrieval / access control bypass

    ColdFusion versions 2023u7, 2021u13 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could exploit this vulnerability to gain unauthorized access to sensitive files or data. Expl…

    Adobe ColdFusion
  • Medium 5.5
    CVE-2024-34113

    ColdFusion | Weak Cryptography for Passwords (CWE-261)

    ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawe…

    Adobe ColdFusion

Revision history

  1. #0

    Initiele versie

References

  • Source - adobe
    https://helpx.adobe.com/security/products/coldfusion/apsb24-41.html