VulnerabilitycriticalExploited in the wild

Adobe Rolls Out New Patches for Actively Exploited ColdFusion Vulnerability

The Hacker Newsby @TheHackersNewsJul 20, 2023 · 13:20 UTC (Jul 20, 2023)1 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-38205 CVE-2023-38204 CVE-2023-38206 CVE-2023-29298 CVE-2023-38203

Tags: cve-2023-38205 cve-2023-38204 cve-2023-38206 cve-2023-29298 cve-2023-38203 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-29298	Unauthenticated Access Control Bypass in Adobe ColdFusion (Actively Exploited)	7.5	100%	KEV	Jul 12, 2023 KEV Jul 20, 2023
CVE-2023-38203	Unauthenticated Deserialization RCE in Adobe ColdFusion (Actively Exploited)	9.8	97%	KEVRansomware	Jul 20, 2023 KEV Jan 8, 2024
CVE-2023-38205 +2 related CVEs CVE-2023-38204 CVE-2023-38206	Security Feature Bypass in Adobe ColdFusion Exposes Admin CFM/CFC Endpoints	7.5 group max	100%	KEV	Sep 14, 2023 KEV Jul 20, 2023

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jul 20, 2023 Software Security / Vulnerability Adobe has released a fresh round of updates to address an incomplete fix for a recently disclosed ColdFusion flaw that has come under active exploitation in the wild. The critical shortcoming, tracked as CVE-2023-38205 (CVSS score: 7. 5), has been described as an instance of improper access control that could result in a security bypass.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.