CVE-2012-5675

2012-12-1211:38:44

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

28.2%

JSON

Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions via unspecified vectors.

Affected configurations

Nvd

Node

adobecoldfusionMatch9.0

adobecoldfusionMatch9.0.1

adobecoldfusionMatch9.0.2

adobecoldfusionMatch10.0

VendorProductVersionCPE
adobecoldfusion9.0cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*
adobecoldfusion9.0.1cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*
adobecoldfusion9.0.2cpe:2.3:a:adobe:coldfusion:9.0.2:*:*:*:*:*:*:*
adobecoldfusion10.0cpe:2.3:a:adobe:coldfusion:10.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	coldfusion	9.0	cpe:2.3:a:adobe:coldfusion:9.0:::::::*
adobe	coldfusion	9.0.1	cpe:2.3:a:adobe:coldfusion:9.0.1:::::::*
adobe	coldfusion	9.0.2	cpe:2.3:a:adobe:coldfusion:9.0.2:::::::*
adobe	coldfusion	10.0	cpe:2.3:a:adobe:coldfusion:10.0:::::::*