Adobe ColdFusion Administration Interface Failed Login Audit Vulnerability
BID:28207
Info
Adobe ColdFusion Administration Interface Failed Login Audit Vulnerability
| Bugtraq ID: | 28207 |
| Class: | Design Error |
| CVE: |
CVE-2008-1203 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 11 2008 12:00AM |
| Updated: | Mar 12 2008 09:01PM |
| Credit: | This issue was disclosed by the vendor. |
| Vulnerable: |
Adobe ColdFusion MX 7.00 Adobe ColdFusion 8.0 |
| Not Vulnerable: | |
Discussion
Adobe ColdFusion Administration Interface Failed Login Audit Vulnerability
Adobe ColdFusion is prone to a vulnerability that allows attackers to conceal login attempts to the administrative interface.
Attackers can exploit this issue to hide or obfuscate actual attack traces.
This issue affects ColdFusion MX 7 and ColdFusion 8.
Adobe ColdFusion is prone to a vulnerability that allows attackers to conceal login attempts to the administrative interface.
Attackers can exploit this issue to hide or obfuscate actual attack traces.
This issue affects ColdFusion MX 7 and ColdFusion 8.
Exploit / POC
Adobe ColdFusion Administration Interface Failed Login Audit Vulnerability
An attacker can exploit this issue with a browser.
An attacker can exploit this issue with a browser.
Solution / Fix
Adobe ColdFusion Administration Interface Failed Login Audit Vulnerability
Solution:
The vendor released an advisory and updates to address this issue. Please see the references for more information.
Adobe ColdFusion 8.0
Adobe ColdFusion MX 7.00
Solution:
The vendor released an advisory and updates to address this issue. Please see the references for more information.
Adobe ColdFusion 8.0
-
Adobe CF8_APSB08-08.zip
http://www.adobe.com/support/security/bulletins/downloads/CF8_APSB08-0 8.zip
Adobe ColdFusion MX 7.00
-
Adobe CFMX7_APSB08-08.zip
http://www.adobe.com/support/security/bulletins/downloads/CFMX7_APSB08 -08.zip
References
Adobe ColdFusion Administration Interface Failed Login Audit Vulnerability
References:
References: