Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-38205
HistorySep 14, 2023 - 8:15 a.m.

Improper access control

2023-09-1408:15:00
PRIOn knowledge base
www.prio-n.com
44
adobe
coldfusion
2018u18
2021u8
2023u2
improper access control
security feature bypass
administration endpoints
exploitation

7.3 High

AI Score

Confidence

High

0.955 High

EPSS

Percentile

99.4%

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.

7.3 High

AI Score

Confidence

High

0.955 High

EPSS

Percentile

99.4%