PT-2014-3679 · Adobe+1 · Coldfusion+1

Published 2014-10-15 · Updated 2020-09-04 · CVE-2014-0572

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 9.0 through 9.0 before Update 13 Adobe ColdFusion versions 9.0.1 through 9.0.1 before Update 12 Adobe ColdFusion versions 9.0.2 through 9.0.2 before Update 7 Adobe ColdFusion versions 10 through 10 before Update 14 Adobe ColdFusion versions 11 through 11 before Update 2

Description The issue allows local users to bypass intended IP-based access restrictions.

Recommendations For Adobe ColdFusion 9.0, apply Update 13 to resolve the issue. For Adobe ColdFusion 9.0.1, apply Update 12 to resolve the issue. For Adobe ColdFusion 9.0.2, apply Update 7 to resolve the issue. For Adobe ColdFusion 10, apply Update 14 to resolve the issue. For Adobe ColdFusion 11, apply Update 2 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2014-2269

CVE-2014-0572

Affected Products

Alt Linux

Coldfusion

References · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0570 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-0572 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-2269 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0572 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0571 · Security Note
• http://helpx.adobe.com/security/products/coldfusion/apsb14-23.html · Vendor Advisory
• http://securitytracker.com/id/1031020 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0572 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2014-0572 · Note