Description
The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the ColdFusion Administrator.
References
- 21421 third-party-advisory
- 1016660 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb06-10.html
- ADV-2006-3224 vdb-entry
- coldfusion-adminapi-auth-bypass(28294) vdb-entry
- 19426 vdb-entry