Adobe ColdFusion APSB18-14 Multiple Security Vulnerabilities
BID:103718
CVE-2018-4938 | CVE-2018-4939 | CVE-2018-4940 | CVE-2018-4941 | CVE-2018-4942 |Info
Adobe ColdFusion APSB18-14 Multiple Security Vulnerabilities
| Bugtraq ID: | 103718 |
| Class: | Input Validation Error |
| CVE: |
CVE-2018-4939 CVE-2018-4938 CVE-2018-4940 CVE-2018-4941 CVE-2018-4942 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Apr 10 2018 12:00AM |
| Updated: | Apr 10 2018 12:00AM |
| Credit: | Nitesh Shilpkar, Nick Bloor of NCC Group, Jaaziel Sam Carlos, William Eatman and Michael S. O'Dell from USRA, Matthias Kaiser of Code White GmbH. |
| Vulnerable: |
Adobe ColdFusion 2016.0 Update 5 Adobe ColdFusion 2016.0 Update 4 Adobe ColdFusion 2016.0 Update 3 Adobe ColdFusion 2016.0 Update 2 Adobe ColdFusion 2016.0 Update 1 Adobe ColdFusion 2016.0 Adobe ColdFusion 11 Update 9 Adobe ColdFusion 11 Update 8 Adobe ColdFusion 11 Update 7 Adobe ColdFusion 11 Update 6 Adobe ColdFusion 11 Update 5 Adobe ColdFusion 11 Update 4 Adobe ColdFusion 11 Update 3 Adobe ColdFusion 11 Update 2 Adobe ColdFusion 11 Update 13 Adobe ColdFusion 11 Update 12 Adobe ColdFusion 11 Update 11 Adobe ColdFusion 11 Update 10 Adobe ColdFusion 11 Update 1 Adobe ColdFusion 11 |
| Not Vulnerable: |
Adobe ColdFusion 2016.0 Update 6 Adobe ColdFusion 11 Update 14 |
Discussion
Adobe ColdFusion APSB18-14 Multiple Security Vulnerabilities
Adobe ColdFusion is prone to multiple security vulnerabilities.
Attackers can exploit these issues to execute arbitrary script code in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials, to gain access to sensitive information, execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.
Adobe ColdFusion is prone to multiple security vulnerabilities.
Attackers can exploit these issues to execute arbitrary script code in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials, to gain access to sensitive information, execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.
Exploit / POC
Adobe ColdFusion APSB18-14 Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Adobe ColdFusion APSB18-14 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Adobe ColdFusion APSB18-14 Multiple Security Vulnerabilities
References:
References: