Adobe ColdFusion Unsupported Version Detection

critical Nessus Plugin ID 72091

Synopsis

The remote host contains an unsupported version of a web application platform.

Description

According to its version, the installation of Adobe ColdFusion running on the remote host is no longer supported.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

Solution

Upgrade to a version of Adobe ColdFusion that is currently supported.

See Also

http://www.nessus.org/u?0e683ec7

http://www.nessus.org/u?75eac050

Plugin Details

Severity: Critical

ID: 72091

File Name: coldfusion_unsupported.nasl

Version: 1.14

Type: remote

Family: CGI abuses

Published: 1/22/2014

Updated: 4/25/2023

Supported Sensors: Nessus

Risk Information

CVSS Score Rationale: Default unsupported software score.

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: manual

CVSS v3

Risk Factor: Critical

Base Score: 10

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:adobe:coldfusion

Reference Information

IAVA: 0001-A-0507