CVE-2024-34112

EUVD-2024-34634
ColdFusion versions 2023u7, 2021u13 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could exploit this vulnerability to gain unauthorized access to sensitive files or data. Exploitation of this issue does not require user interaction.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
adobecoldfusion
2023 ≤
𝑥
< update_8
ADP
adobecoldfusion
2021 ≤
𝑥
< update_14
ADP
Common Weakness Enumeration
References
https://helpx.adobe.com/security/products/coldfusion/apsb24-41.html
https://helpx.adobe.com/security/products/coldfusion/apsb24-41.html