CVE-2008-1656 — Adobe Coldfusion vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
CNA4.6
EPSS
4.7%
top 10.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Coldfusion
Timeline
PublishedApr 9
Latest updateMay 1

Description

Adobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods, which allows remote attackers to invoke these methods via Flex 2 remoting, a different vulnerability than CVE-2006-4725.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDadobe/coldfusion8.0, 8.1+1

Patches

Patch: secunia.com ↗Patch: www.adobe.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-w62h-8659-5jcf: Adobe ColdFusion 8 and 8↗2022-05-01
▶
CVEList
CVE-2008-1656: Adobe ColdFusion 8 and 8↗2008-04-09
▶
CVE-2008-1656 — Adobe Coldfusion vulnerability | cvebase