Description

Due to the Improper Access Control vulnerability, an unauthenticated attacker can read arbitrary files in the OS.

Remediation

Upgrade to the latest version of Adobe ColdFusion

References

Security updates available for Adobe ColdFusion | APSB24-14

Related Vulnerabilities

Moodle Other Vulnerability (CVE-2006-4942)

MySQL CVE-2021-35647 Vulnerability (CVE-2021-35647)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-0273)

WordPress Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-9066)

Oracle Database Server CVE-2007-5504 Vulnerability (CVE-2007-5504)

Severity

High

Classification

CVE-2024-20767 CWE-284 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Authentication Bypass Known Vulnerabilities