Description

Due to the Improper Access Control vulnerability, an unauthenticated attacker can read arbitrary files in the OS.

Remediation

Upgrade to the latest version of Adobe ColdFusion

References

Security updates available for Adobe ColdFusion | APSB24-14

Related Vulnerabilities

Moodle DEPRECATED: Code Vulnerability (CVE-2015-3177)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29210)

Ruby on Rails Resource Management Errors Vulnerability (CVE-2015-7581)

Oracle Application Server Other Vulnerability (CVE-2002-0566)

WordPress Plugin Debug Log Manager Security Bypass (2.2.1)

Severity

High

Classification

CVE-2024-20767 CWE-284 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Authentication Bypass Known Vulnerabilities