Lucene search

AdobeCVE-2012-5675

HistoryDec 12, 2012 - 11:38 a.m.

CVE-2012-5675

2012-12-1211:38:44

CWE-264

adobe

web.nvd.nist.gov

adobe

coldfusion

9.0

9.0.2

sandbox

bypass

security vulnerability

cve-2012-5675

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

28.2%

JSON

Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions via unspecified vectors.

Affected configurations

Nvd

Node

adobecoldfusionMatch9.0

adobecoldfusionMatch9.0.1

adobecoldfusionMatch9.0.2

adobecoldfusionMatch10.0

VendorProductVersionCPE
adobecoldfusion9.0cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*
adobecoldfusion9.0.1cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*
adobecoldfusion9.0.2cpe:2.3:a:adobe:coldfusion:9.0.2:*:*:*:*:*:*:*
adobecoldfusion10.0cpe:2.3:a:adobe:coldfusion:10.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	coldfusion	9.0	cpe:2.3:a:adobe:coldfusion:9.0:::::::*
adobe	coldfusion	9.0.1	cpe:2.3:a:adobe:coldfusion:9.0.1:::::::*
adobe	coldfusion	9.0.2	cpe:2.3:a:adobe:coldfusion:9.0.2:::::::*
adobe	coldfusion	10.0	cpe:2.3:a:adobe:coldfusion:10.0:::::::*

References

www.adobe.com/support/security/bulletins/apsb12-26.html

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

28.2%

JSON

Related for CVE-2012-5675