Detections
Analytics
ColdFusion Administrative Interface Authentication Bypass
high Nessus Network Monitor Plugin ID 3702
Synopsis
The remote host is vulnerable to a flaw that allows for the bypassing of authentication.Description
The remote host is running Macromedia ColdFusion, a web application server. This version of Macromedia is vulnerable to a flaw where an unauthenticated user can bypass authentication and gain administrative access over the application. Successful exploitation impacts confidentiality, integrity and availability.Solution
Upgrade to a version higher than 7,0,2,142559.See Also
http://www.adobe.com/support/security/bulletins/apsb06-10.html
Plugin Details
Severity: High
ID: 3702
Family: Web Servers
Published: 8/9/2006
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.4
Temporal Score: 7.3
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:macromedia:coldfusion