Adobe ColdFusion CVE-2019-7839 Arbitrary Command Injection Vulnerability
BID:108718
Info
Adobe ColdFusion CVE-2019-7839 Arbitrary Command Injection Vulnerability
| Bugtraq ID: | 108718 |
| Class: | Design Error |
| CVE: |
CVE-2019-7839 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 11 2019 12:00AM |
| Updated: | Jun 11 2019 12:00AM |
| Credit: | Moritz Bechler (SySS GmbH) |
| Vulnerable: |
Adobe ColdFusion 2018.0 Update 2 Adobe ColdFusion 2018.0 Update 1 Adobe ColdFusion 2016.0 Update 8 Adobe ColdFusion 2016.0 Update 7 Adobe ColdFusion 2016.0 Update 6 Adobe ColdFusion 2016.0 Update 5 Adobe ColdFusion 2016.0 Update 4 Adobe ColdFusion 2016.0 Update 3 Adobe ColdFusion 2016.0 Update 2 Adobe ColdFusion 2016.0 Update 1 Adobe ColdFusion 2016.0 Adobe ColdFusion 2018.0.0 Update 3 Adobe ColdFusion 2016.0.0 Update 9 Adobe ColdFusion 2016.0.0 Update 10 Adobe ColdFusion 11 Update 9 Adobe ColdFusion 11 Update 8 Adobe ColdFusion 11 Update 7 Adobe ColdFusion 11 Update 6 Adobe ColdFusion 11 Update 5 Adobe ColdFusion 11 Update 4 Adobe ColdFusion 11 Update 3 Adobe ColdFusion 11 Update 2 Adobe ColdFusion 11 Update 18 Adobe ColdFusion 11 Update 17 Adobe ColdFusion 11 Update 16 Adobe ColdFusion 11 Update 15 Adobe ColdFusion 11 Update 14 Adobe ColdFusion 11 Update 13 Adobe ColdFusion 11 Update 12 Adobe ColdFusion 11 Update 11 Adobe ColdFusion 11 Update 10 Adobe ColdFusion 11 Update 1 Adobe ColdFusion 11 |
| Not Vulnerable: |
Adobe ColdFusion 2018.0.0 Update 4 Adobe ColdFusion 2016.0.0 Update 11 Adobe ColdFusion 11 Update 19 |
Discussion
Adobe ColdFusion CVE-2019-7839 Arbitrary Command Injection Vulnerability
Adobe Digital Editions is prone to an unspecified arbitrary command-injection vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.
The following versions are affected:
ColdFusion 2018 Update 3 and prior versions
ColdFusion 2016 Update 10 and prior versions.
ColdFusion 11 Update 18 and prior versions.
Adobe Digital Editions is prone to an unspecified arbitrary command-injection vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.
The following versions are affected:
ColdFusion 2018 Update 3 and prior versions
ColdFusion 2016 Update 10 and prior versions.
ColdFusion 11 Update 18 and prior versions.
Exploit / POC
Adobe ColdFusion CVE-2019-7839 Arbitrary Command Injection Vulnerability
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Adobe ColdFusion CVE-2019-7839 Arbitrary Command Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Adobe ColdFusion CVE-2019-7839 Arbitrary Command Injection Vulnerability
References:
References:
- Adobe Homepage (Adobe)
- Security updates available for ColdFusion | APSB19-27 (Adobe)