PT-2014-3678 · Adobe+1 · Coldfusion 10+5

Publicado 2014-10-15 · Atualizado 2020-09-04 · CVE-2014-0571

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion 9.0 before Update 13 Adobe ColdFusion 9.0.1 before Update 12 Adobe ColdFusion 9.0.2 before Update 7 Adobe ColdFusion 10 before Update 14 Adobe ColdFusion 11 before Update 2

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For Adobe ColdFusion 9.0, apply Update 13 to resolve the issue. For Adobe ColdFusion 9.0.1, apply Update 12 to resolve the issue. For Adobe ColdFusion 9.0.2, apply Update 7 to resolve the issue. For Adobe ColdFusion 10, apply Update 14 to resolve the issue. For Adobe ColdFusion 11, apply Update 2 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

ALT-PU-2014-2269

CVE-2014-0571

Produtos afetados

Alt Linux

Coldfusion 10

Coldfusion 11

Coldfusion 9.0

Coldfusion 9.0.1

Coldfusion 9.0.2

Referências · 9

• https://packages.altlinux.org/ru/vuln/CVE-2014-0571 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0570 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2014-2269 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0572 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0571 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0571 · Nota de Segurança
• http://securitytracker.com/id/1031020 · Nota
• http://helpx.adobe.com/security/products/coldfusion/apsb14-23.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-0571 · Nota de Segurança