Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-26347
HistoryNov 17, 2023 - 2:15 p.m.

Improper access control

2023-11-1714:15:00
PRIOn knowledge base
www.prio-n.com
2
adobe coldfusion
2023.5
2021.11
access control
vulnerability
security feature bypass
administration endpoints
unauthenticated attacker
exploitation

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.5%

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.5%

Related for PRION:CVE-2023-26347