Description
The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.
References
- 29332 third-party-advisory
- 28207 vdb-entry
- ADV-2008-0862 vdb-entry
- 1019600 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb08-08.html
- coldfusion-interface-brute-force(41150) vdb-entry