PT-2019-18765 · Adobe · Coldfusion

Publicado 2019-05-24 · Atualizado 2020-09-04 · CVE-2019-7816

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ColdFusion versions Update 2 and earlier ColdFusion versions Update 9 and earlier ColdFusion versions Update 17 and earlier

Description The issue allows for a file upload restriction bypass, which could lead to arbitrary code execution if successfully exploited.

Recommendations For ColdFusion versions Update 2 and earlier, update to a version later than Update 2. For ColdFusion versions Update 9 and earlier, update to a version later than Update 9. For ColdFusion versions Update 17 and earlier, update to a version later than Update 17.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-7816

Produtos afetados

Coldfusion

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-7816 · Aviso do Fabricante
• https://helpx.adobe.com/security/products/coldfusion/apsb19-14.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7816 · Nota de Segurança