Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-40699
HistorySep 07, 2023 - 1:15 p.m.

Improper access control

2023-09-0713:15:00
PRIOn knowledge base
www.prio-n.com
6
coldfusion
2021
access control
vulnerability
permissions
cfide
authenticated
attacker
data manipulation

7.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an improper access control vulnerability when checking permissions in the CFIDE path. An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment.

7.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

Related for PRION:CVE-2021-40699