Lucene search

K
nvd[email protected]NVD:CVE-2005-4345
HistoryDec 19, 2005 - 3:47 a.m.

CVE-2005-4345

2005-12-1903:47:00
web.nvd.nist.gov
3

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

30.4%

Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges.

Affected configurations

Nvd
Node
macromediacoldfusionMatch7.0
VendorProductVersionCPE
macromediacoldfusion7.0cpe:2.3:a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

30.4%

Related for NVD:CVE-2005-4345