Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass

CVE-2023-29301

Summary

Adobe ColdFusion is impacted by a vulnerability that allows improper restriction of excessive authentication attempts. This flaw enables attackers to bypass security features, potentially compromising user confidentiality. The vulnerability exists in specific versions of ColdFusion released prior to specific updates, making it a significant concern for users who have not updated their systems. Notably, exploitation of this vulnerability does not necessitate user interaction, increasing the risk of automated attacks.

References