ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass  
CVE-2021-40698

7.4HIGH

Key Information:

Vendor

Adobe
Status
Coldfusion
Vendor
CVE Published:
7 September 2023

What is CVE-2021-40698?

Adobe ColdFusion versions 2021 up to update 1 and 2018.10 and earlier are susceptible to a vulnerability related to the use of inherently dangerous functions. This flaw allows an authenticated attacker to bypass security features, potentially gaining access to and manipulating arbitrary data within the system. Organizations using affected versions are urged to review their security measures and apply necessary updates to safeguard their environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

ColdFusion 0 <= 2018.11

References

https://helpx.adobe.com/security/products/coldfusion/apsb...
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.