Lucene search

K
zdiRgodZDI-22-1418
HistoryOct 14, 2022 - 12:00 a.m.

Adobe ColdFusion Admin Component Use of Hard-coded Credentials Authentication Bypass Vulnerability

2022-10-1400:00:00
rgod
www.zerodayinitiative.com
9
adobe
coldfusion
admin component
hard-coded credentials
authentication bypass
vulnerability
remote attackers
exploit
flaw
administrator user
leveraging
system

0.001 Low

EPSS

Percentile

43.0%

This vulnerability allows remote attackers to bypass authentication on affected installations of Adobe ColdFusion. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Admin Component service. The service uses a hard-coded password for the administrator user. An attacker can leverage this vulnerability to bypass authentication on the system.

0.001 Low

EPSS

Percentile

43.0%