Description (CNA)
The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, such as C:\ColdFusion2021\. By default, unprivileged users can create files in this directory structure, which creates a privilege-escalation vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Adobe / ColdFusion | affected 2021; affected 2018; affected 2016 |
CWE
CWE-284
References
ADP enrichment
No English description supplied.