Description
Adobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods, which allows remote attackers to invoke these methods via Flex 2 remoting, a different vulnerability than CVE-2006-4725.
References
- adobe-coldfusion-cfc-security-bypass(41720) vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb08-12.html
- 44280 vdb-entry
- 1019806 vdb-entry
- ADV-2008-1157 vdb-entry
- 29748 third-party-advisory
- 28698 vdb-entry