Information Disclosure Vulnerability in Adobe ColdFusion Builder
CVE-2016-7887

7.5HIGH

Key Information:

Vendor
Adobe
Status
Adobe Coldfusion Builder 2016 Update 2 And Earlier, 3.0.3 And Earlier
Vendor
CVE Published:
15 December 2016

Summary

Adobe ColdFusion Builder versions 2016 Update 2 and earlier, along with versions 3.0.3 and earlier, are susceptible to a vulnerability that could allow unauthorized information disclosure. This security issue may be exploited by attackers to gain unauthorized access to sensitive data, impacting the overall security of the application. Adobe has provided detailed guidelines and fixes to mitigate the effects of this vulnerability.

Affected Version(s)

Adobe ColdFusion Builder 2016 update 2 and earlier, 3.0.3 and earlier Adobe ColdFusion Builder 2016 update 2 and earlier, 3.0.3 and earlier

References

https://helpx.adobe.com/security/products/coldfusion/apsb...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1037443
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/94874
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.