CVE-2021-40698

Summary

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass  . An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment.

Affected Software

Weaknesses

• CWE-242: Use of Inherently Dangerous Function (CWE-242)

ADP Enrichment

CVE Program Container

Additional References

• https://helpx.adobe.com/security/products/coldfusion/apsb21-75.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://helpx.adobe.com/security/products/coldfusion/apsb21-75.html

• ←Previous
• Next→