Adobe ColdFusion Improper Access Control Vulnerability
Adobe · ColdFusion
Date added (CISA)
2024-12-16
Remediation due
2025-01-06
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel.