Adobe ColdFusion Vulnerability: Unauthorized Access Possible via Improper Authentication

CVE-2024-45113

Summary

ColdFusion versions 2023.6, 2021.12, and earlier are vulnerable due to an improper authentication issue. This vulnerability allows attackers to exploit the application without requiring any user interaction, potentially leading to unauthorized access and privilege escalation. As a result, the integrity of the application may be compromised, making it critical for users to address this security concern promptly. Adobe has released an advisory detailing the impact and available mitigations.

References