PT-2014-3677 · Adobe+1 · Coldfusion+1

Publicado 2014-10-15 · Atualizado 2020-09-04 · CVE-2014-0570

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion version 9.0 before Update 13 Adobe ColdFusion version 9.0.1 before Update 12 Adobe ColdFusion version 9.0.2 before Update 7 Adobe ColdFusion version 10 before Update 14 Adobe ColdFusion version 11 before Update 2

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of victims via unknown vectors.

Recommendations For Adobe ColdFusion version 9.0, apply Update 13 to resolve the issue. For Adobe ColdFusion version 9.0.1, apply Update 12 to resolve the issue. For Adobe ColdFusion version 9.0.2, apply Update 7 to resolve the issue. For Adobe ColdFusion version 10, apply Update 14 to resolve the issue. For Adobe ColdFusion version 11, apply Update 2 to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

ALT-PU-2014-2269

CVE-2014-0570

Produtos afetados

Alt Linux

Coldfusion

Referências · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0570 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2014-2269 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0572 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0571 · Nota de Segurança
• http://securitytracker.com/id/1031020 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2014-0570 · Nota
• http://helpx.adobe.com/security/products/coldfusion/apsb14-23.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-0570 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0570 · Nota