CVE-2024-45113

EUVD-2024-41316
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access and affect the integrity of the application. Exploitation of this issue does not require user interaction.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
adobecoldfusion
2023.0 ≤
𝑥
≤ 2023.6
ADP
adobecoldfusion
2021.0 ≤
𝑥
≤ 2021.12
ADP
Common Weakness Enumeration
References
https://helpx.adobe.com/security/products/coldfusion/apsb24-14.html