CVE-2023-29298 — Adobe ColdFusion Improper Access Control Security feature bypass

Description (CNA)

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.

Affected (CNA)

Vendor / product	Versions
Adobe / ColdFusion	affected 0 through 2023.0.0.330468

CWE

CWE-284

References

https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html

ADP enrichment

CVE

No English description supplied.

https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html

CISA-ADP

No English description supplied.

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29298