Privilege Escalation Vulnerability in Adobe ColdFusion Software

CVE-2020-9672

What is CVE-2020-9672?

Adobe ColdFusion versions 2016 update 15 and earlier, as well as 2018 update 9 and earlier, are susceptible to a dll search-order hijacking vulnerability. This security flaw allows an attacker to manipulate the search order for dynamically linked libraries, potentially leading to unauthorized privilege escalation. Organizations using these outdated versions are advised to apply the necessary updates promptly to mitigate the associated risks.

References