Adobe ColdFusion CVE-2011-0629 Unspecified Cross Site Request Forgery Vulnerability
BID:48271
Info
Adobe ColdFusion CVE-2011-0629 Unspecified Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 48271 |
| Class: | Design Error |
| CVE: |
CVE-2011-0629 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 14 2011 12:00AM |
| Updated: | Jun 14 2011 12:00AM |
| Credit: | Sow Ching Shiong via Secunia |
| Vulnerable: |
Adobe ColdFusion 8.0.1 Adobe ColdFusion 9.0.1 Adobe ColdFusion 9.0 Adobe ColdFusion 8.0 |
| Not Vulnerable: | |
Discussion
Adobe ColdFusion CVE-2011-0629 Unspecified Cross Site Request Forgery Vulnerability
Adobe ColdFusion is prone to a cross-site request-forgery vulnerability.
An attacker can exploit this issue to perform unauthorized actions by enticing a logged-in user to visit a malicious site.
Versions prior to Adobe ColdFusion 9.0.1 and prior are vulnerable.
Adobe ColdFusion is prone to a cross-site request-forgery vulnerability.
An attacker can exploit this issue to perform unauthorized actions by enticing a logged-in user to visit a malicious site.
Versions prior to Adobe ColdFusion 9.0.1 and prior are vulnerable.
Exploit / POC
Adobe ColdFusion CVE-2011-0629 Unspecified Cross Site Request Forgery Vulnerability
To exploit the issue, an attacker must entice a user into visiting a malicious site.
To exploit the issue, an attacker must entice a user into visiting a malicious site.
Solution / Fix
Adobe ColdFusion CVE-2011-0629 Unspecified Cross Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Adobe ColdFusion CVE-2011-0629 Unspecified Cross Site Request Forgery Vulnerability
References:
References: