← CVE Intelligence

CVE-2021-40699

ColdFusion CFIDE Improper Access Control Leads To Privilege Escalation PUBLISHED

Description (CNA)

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an improper access control vulnerability when checking permissions in the CFIDE path. An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment.

Affected (CNA)

Vendor / productVersions
Adobe / ColdFusionaffected 0 through 2018.11

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.